cozmoslabs
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting cozmoslabs.
- CVE-2026-42385WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-39514WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-7647Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection8.1
- CVE-2026-3139User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field4.3
- CVE-2026-27413WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability9.3
- CVE-2025-68514WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability6.5
- CVE-2025-66074WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerability9.0
- CVE-2025-66073WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Injection vulnerability7.2
- CVE-2025-13054User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4
- CVE-2025-58592WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability8.1
- CVE-2025-11835Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal5.3
- CVE-2025-58600WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability5.3
- CVE-2025-8895WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy9.8
- CVE-2025-54017WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability7.5
- CVE-2025-8896User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4