CVE-2024-43980 WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: from n/a through 1.4.1...

PT-2024-30508 · Cozythemes · Hello Agency

Name of the Vulnerable Software and Affected Versions: CozyThemes Hello Agency versions 1.0.0 through 1.0.5 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 1.0.0 throug...

PT-2024-30844 · Cozythemes · Cozythemes Fota Wp

Name of the Vulnerable Software and Affected Versions: CozyThemes Fota WP versions 1.4.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For CozyThemes Fota...

PT-2024-30842 · Cozythemes · Cozythemes Blockbooster

Name of the Vulnerable Software and Affected Versions: CozyThemes Blockbooster versions 1.0.10 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For CozyThemes Blockbooste...

CVE-2024-50441

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through = 2.0.15...

CVE-2024-50441

CVE-2024-50441 affects the Cozy Blocks Cozy Addons in the WordPress Cozy Blocks ecosystem (versions

CVE-2024-50441 WordPress Cozy Blocks plugin <= 2.0.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through = 2.0.15...

CVE-2024-50502

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.18...

CVE-2024-50502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows DOM-Based XSS.This issue affects Cozy Blocks: from n/a through = 2.0.18...

CVE-2024-50502 WordPress Cozy Blocks plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows DOM-Based XSS.This issue affects Cozy Blocks: from n/a through = 2.0.18...

CVE-2024-47355

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through = 2.0.11...

CVE-2024-47355

CVE-2024-47355 concerns the Cozy Blocks plugin for WordPress (Cozy Addons/Cozy Blocks). The vulnerability is a Stored Cross-Site Scripting (XSS) flaw caused by improper input neutralization during web page generation, affecting Cozy Blocks versions through 2.0.11. Public sources consistently cite...

WordPress Cozy Blocks Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Cozy Blocks Type Plugin Vulnerable versions = 2.0.11 Fixed in 2.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47355 Patch priority Low CVSS severity Low 6.5 Developer CozyThemes PSID 141e18cb775e Credits Khalid Yusuf Required privilege Contributor...

WordPress Cozy Blocks Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Cozy Blocks Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer CozyThemes PSID 5480a1de59c0 Credits Rafie Muhammad Patchstack Required...