cozmoslabs
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting cozmoslabs.
- CVE-2026-66701WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability5.3
- CVE-2026-18510TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content7.2
- CVE-2026-17505TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting6.1
- CVE-2026-59539WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability7.5
- CVE-2026-61971WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability2.7
- CVE-2026-57348WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability7.2
- CVE-2026-42385WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-39514WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-7647Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection8.1
- CVE-2026-3139User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field4.3
- CVE-2026-27413WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability9.3
- CVE-2025-68514WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability6.5
- CVE-2025-66074WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerability9.0
- CVE-2025-66073WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Injection vulnerability7.2
- CVE-2025-13054User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4