cozy_blocks_website_builder_business_growth_toolkit_popups_lead_forms_inbox vulnerabilities
CVEs whose affected-version data names the cozy_blocks_website_builder_business_growth_toolkit_popups_lead_forms_inbox package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-109978Medium· 6.4Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute
The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'productRating.iconColor' parameter in all versions up to, an…
▾ Sunlitcozythemes · Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & InboxEPSS 0.24%via CVEORG
CVE-2026-109975Medium· 6.4Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content (block attribute icon.view / icon.layout / icon.gap)…
▾ Sunlitcozythemes · Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & InboxEPSS 0.20%via CVEORG