CVE-2026-15333

CVE-2026-15333 affects Cozy Blocks (WordPress plugin) up to version 2.2.11. The flaw is a stored Cross-Site Scripting vulnerability in the cozyCustomFont Block Attribute, caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher...

CVE-2025-27274

Path Traversal vulnerability in NotFound GPX Viewer allows Path Traversal. This issue affects GPX Viewer: from n/a through 2.2.11...