CVE-2026-109975 | Cozymes Cozy Blocks Plugin up to 2.2.27 on WordPress Block Attribute icon.view/icon.layout/icon.gap cross site scripting

October 28, 2026 Yanac

A vulnerability labeled as problematic has been found in Cozymes Cozy Blocks Plugin up to 2.2.27 on WordPress. This impacts an unknown function of the component Block Attribute. Such manipulation of the argument icon.view/icon.layout/icon.gap leads to cross site scripting.

This vulnerability is documented as CVE-2026-109975. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More