CVE-2026-15950

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization an...

CVE-2026-15950

CVE-2026-15950 affects the Cozy Blocks plugin for WordPress (Cozy Blocks – Page Builder for Gutenberg Editor & FSE) up to version 2.2.11. The vulnerability is a stored XSS via the layoutCircle.alignment Block Attribute caused by insufficient input sanitization and output escaping. Authorized atta...