CozyThemes vulnerabilities
We track 5 vulnerabilities in CozyThemes products across 6 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
Latest CozyThemes vulnerabilities
- 9.8 Critical severity
Rootblox: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CozyThemes Rootblox rootblox allows PHP Local File Inclusion.This issue affects Rootblox: from n/a through 1.0.6.
- 9.8 Critical severity
Fota WP: Missing Authorization
Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: from n/a through 1.4.1.
- 9.8 Critical severity
Blockbooster: Missing Authorization
Missing Authorization vulnerability in CozyThemes Blockbooster allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blockbooster: from n/a through 1.0.10.
- 9.8 Critical severity
ReviveNews: Missing Authorization
Missing Authorization vulnerability in CozyThemes ReviveNews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReviveNews: from n/a through 1.0.2.
- 9.8 Critical severity
Hello Agency: Missing Authorization
Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5.