CVE-2026-109978 | Cozythemes Cozy Blocks Plugin up to 2.2.27 on WordPress productRating.iconColor cross site scripting

October 28, 2026 Yanac

A vulnerability marked as problematic has been reported in Cozythemes Cozy Blocks Plugin up to 2.2.27 on WordPress. The impacted element is an unknown function. This manipulation of the argument productRating.iconColor causes cross site scripting.

This vulnerability appears as CVE-2026-109978. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More