CVE-2026-19948: CWE-862 Missing Authorization in cozythemes Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates
Description
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve the name, price, short description, image URL, permalink, stock status, and product type of draft, pending, private, and catalog-hidden WooCommerce products not intended to be publicly visible. The sidebarNonce value is emitted unconditionally into public page HTML by multiple block renderers with no login gate, allowing unauthenticated visitors to harvest a valid nonce and pass the only authentication check in the handler.
CVSS v3.1
Score 5.3medium
Affected software
cozythemes
Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Cozy Blocks plugin for WordPress contains a missing authorization check (CWE-862) that allows unauthenticated users to retrieve sensitive product details from WooCommerce products that should be hidden. The vulnerability arises because the plugin unconditionally exposes a sidebarNonce value in the page HTML, which attackers can harvest to pass the only authentication check in the handler. This affects all versions up to and including 2.2.17. No official patch or remediation guidance is currently available.
Potential Impact
An unauthenticated attacker can bypass authorization controls to access non-public WooCommerce product information, including name, price, short description, image URL, permalink, stock status, and product type. This exposure of sensitive product data could lead to information disclosure but does not impact integrity or availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin or WooCommerce product data where possible and monitor for updates from the vendor.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2026-08-15T19:13:04.910Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a9656a2acd9273b4936dc63
Added to database: 09/01/2026, 04:37:54 UTC
Last enriched: 09/07/2026, 14:27:59 UTC
Last updated: 10/13/2026, 18:48:18 UTC
Views: 72
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.