[ Vendor · 3 CVEs ]
CozyThemes
CVEs affecting CozyThemes published in the last 30 days, plus any CozyThemes CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112832 | 22 Oct 2026 | CVSS 9.8 | CozyThemes RootbloxImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CozyThemes Rootblox rootblox… | |
| CVE-2026-111843 | 20 Oct 2026 | CVSS 6.5 | CozyThemes RootbloxImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Rootblox rootblox allows Stored… | |
| CVE-2026-97070 | 5 Oct 2026 | CVSS 6.9 | CozyThemes Cozy BlocksAuthorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access… |