Plugin icon

Cozy Blocks – All-in-One Website Builder with Gutenberg Blocks, 500+ Patterns and 40+ Homepage Templates for Full Site Editing (FSE)

cozy-addons

Vulnerabilities:

7

Last Updated:

March 16, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2025-09-22
Title
Cozy Blocks < 2.1.30 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 2.1.30
CVSS
6.5 (medium)
Published
2025-05-07
Title
Cozy Blocks < 2.1.23 - Missing Authorization
Fixed in
Fixed in 2.1.23
CVSS
5.3 (medium)
Published
2025-03-27
Title
Cozy Blocks < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.7
CVSS
6.4 (medium)
Published
2024-10-25
Title
Cozy Blocks < 2.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.19
CVSS
6.4 (medium)
Published
2024-10-24
Title
Cozy Blocks < 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.16
CVSS
6.4 (medium)
Published
2024-09-30
Title
Cozy Blocks < 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.12
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.2.4
CVSS
6.1 (medium)