Skip to content
PluginCanary

Cozy Blocks

Cozy Blocks - Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
by CozyThemes · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 31 Oct 2026, 61 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Cozy Blocks
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Cozy Blocks still maintained?
Yes. Last release 31 Oct 2026, 61 releases in the last 24 months. 31 Oct 2026 · wordpress.org
Who owns Cozy Blocks, and has it changed hands?
No change recorded. Main committer cozythemes since Mar 2022. 3 Nov 2026 · SVN log
Was Cozy Blocks removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Cozy Blocks safe?
17 known vulnerabilities, all fixed (latest in 2.2.28). Not on the exploited list. 29 Oct 2026 · Wordfence Intelligence
Is the latest Cozy Blocks update safe to install?
No ownership change before 2.2.29. No one-star spike after it. 31 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master8 Mar 2022 to 8 Mar 2022, 1 commits
cozythemes8 Mar 2022 to 31 Oct 2026, 135 commits

2 committers recorded. No ownership change since 2022.

Maintenance

Last release
4 days ago
Releases, 24 months
61
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Cozy Blocks
Q1 202411
Q2 20247
Q3 202410
Q4 202413
Q1 202511
Q2 20255
Q3 20255
Q4 20256
Q1 20263
Q2 20262
Q3 202615
Q4 20264

Last release 31 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.6.

Rating distribution
5 star18
4 star1
3 star0
2 star0
1 star2

Security record

13 vulnerabilities in 24 months (17 on record), all patched (latest fixed in 2.2.28).

Show 17 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026Cozy Blocks - Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.272.2.28Patched before disclosure
27 Oct 2026Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute6.4<= 2.2.272.2.28Patched before disclosure
27 Oct 2026Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute6.4<= 2.2.272.2.28Patched before disclosure
3 Oct 2026Cozy Blocks - Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates <= 2.2.23 - Unauthenticated Insecure Direct Object Reference5.3<= 2.2.232.2.24Patched before disclosure
31 Aug 2026Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter5.3<= 2.2.172.2.18Patched before disclosure
24 Aug 2026Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute6.4<= 2.2.162.2.17Patched before disclosure
31 Jul 2026Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute6.4<= 2.2.112.2.12Patched before disclosure
28 Jul 2026Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute6.4<= 2.2.112.2.12Patched before disclosure
23 Jul 2026Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute6.4<= 2.2.112.2.12Patched before disclosure
23 Jul 2026Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute6.4<= 2.2.112.2.12Patched before disclosure
22 Sep 2025Cozy Blocks <= 2.1.29 - Unauthenticated Arbitrary Shortcode Execution6.5<= 2.1.292.1.30Patched before disclosure
7 May 2025Cozy Blocks <= 2.1.22 - Missing Authorization5.3<= 2.1.222.1.23Patched before disclosure
27 Mar 2025Cozy Blocks <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.62.1.7Patched before disclosure
25 Oct 2024Cozy Blocks <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.0.182.0.19Patched before disclosure
24 Oct 2024Cozy Blocks <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.0.152.0.16Patched before disclosure
30 Sep 2024Cozy Blocks <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.0.112.0.12Patched before disclosure
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 1.2.31.2.42

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Cozy Blocks
4 May 2026207
11 May 2026338
18 May 2026479
25 May 2026379
1 Jun 2026320
8 Jun 2026329
15 Jun 20263,262
22 Jun 2026463
29 Jun 2026469
6 Jul 20263,351
13 Jul 2026555
20 Jul 20263,405
27 Jul 20266,315
3 Aug 20261,116
10 Aug 20263,140
17 Aug 20265,061
24 Aug 20263,924
31 Aug 2026858
7 Sep 20268,162
14 Sep 20263,688
21 Sep 20263,400
28 Sep 20263,811
5 Oct 20264,031
12 Oct 20265,926
19 Oct 2026935
26 Oct 20264,181
2 Nov 2026222

Weekly downloads over the last 4 weeks are 11% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Animate It!Score 100 · 20,000+Code Block ProScore 100 · 10,000+Animations for BlocksScore 100 · 10,000+Advanced Post BlockScore 98 · 10,000+Blocks AnimationScore 97 · 90,000+

Facts

Version2.2.29
AuthorCozyThemes
Added8 Mar 2022
Last updated31 Oct 2026
Active installs6,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP7.4
CategoryDesign & Themes > Page Builders & Visual Editors
Tagspage builder, block patterns, gutenberg blocks, full-site-editing, woocommerce blocks

Other plugins by this author: Theme Demo Importer and Patterns Library for CozyThemes - Cozy Essential Addons, Rootblox - Header & Footer Builder for Full Site Editing (FSE)

Questions

Is Cozy Blocks still maintained?

Yes. Last release 31 Oct 2026, 61 releases in the last 24 months.

Who owns Cozy Blocks, and has it changed hands?

No change recorded. Main committer cozythemes since Mar 2022.

Was Cozy Blocks removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Cozy Blocks safe?

17 known vulnerabilities, all fixed (latest in 2.2.28). Not on the exploited list.

Is the latest Cozy Blocks update safe to install?

No ownership change before 2.2.29. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue