vciy

CVEs we hold for Cozmoslabs

Records whose assigning authority named Cozmoslabs as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-82607Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted uploadCozmoslabs Profile Builder Plugin
CVE-2026-78267WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerabilityCozmoslabs TranslatePress
CVE-2026-7647Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object InjectionCozmoslabs Profile Builder Pro
CVE-2026-76053TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parsercozmoslabs TranslatePress – Translate Multilingual sites…
CVE-2026-75981TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scriptingcozmoslabs TranslatePress – Translate Multilingual sites…
CVE-2026-75965User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attributecozmoslabs User Profile Builder – Beautiful User…
CVE-2026-75964User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parametercozmoslabs User Profile Builder – Beautiful User…
CVE-2026-66701WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerabilityCozmoslabs Profile Builder
CVE-2026-66582WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerabilityCozmoslabs TranslatePress
CVE-2026-6431User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Fieldcozmoslabs User Profile Builder – Beautiful User…
CVE-2026-61971WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerabilityCozmoslabs User Profile Picture
CVE-2026-59539WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2026-57348WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2026-42385WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerabilityCozmoslabs Profile Builder Pro
CVE-2026-39514WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2026-3139User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct…cozmoslabs User Profile Builder – Beautiful User…
CVE-2026-27413WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerabilityCozmoslabs Profile Builder Pro
CVE-2026-19632TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosurecozmoslabs TranslatePress – Translate Multilingual sites…
CVE-2026-18512TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in…cozmoslabs TranslatePress – Translate Multilingual sites…
CVE-2026-18510TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Contentcozmoslabs TranslatePress – Translate Multilingual sites…
CVE-2026-17505TranslatePress <= 3.2.5 - Reflected Cross-Site Scriptingcozmoslabs TranslatePress – Translate Multilingual sites…
CVE-2026-15826User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account…cozmoslabs User Profile Builder – Beautiful User…
CVE-2025-8896User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated…cozmoslabs User Profile Builder – Beautiful User…
CVE-2025-8895WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copycozmoslabs WP Webhooks – Automate repetitive tasks by…
CVE-2025-68514WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2025-66074WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerabilityCozmoslabs WP Webhooks
CVE-2025-66073WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Injection vulnerabilityCozmoslabs WP Webhooks
CVE-2025-58600WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control VulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2025-58592WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data VulnerabilityCozmoslabs TranslatePress
CVE-2025-54017WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion VulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2025-49870WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection VulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2025-49292WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing VulnerabilityCozmoslabs Profile Builder
CVE-2025-4671Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare…cozmoslabs User Profile Builder – Beautiful User…
CVE-2025-31088WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) VulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2025-30773WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection VulnerabilityCozmoslabs TranslatePress
CVE-2025-2314User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated…cozmoslabs User Profile Builder – Beautiful User…
CVE-2025-13054User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated…cozmoslabs User Profile Builder – Beautiful User…
CVE-2025-11835Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing…cozmoslabs Paid Membership Subscriptions – Effortless…
CVE-2024-9222Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected…cozmoslabs Paid Membership Subscriptions – Effortless…
CVE-2024-5639User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Updatecozmoslabs User Profile Picture
CVE-2024-34827WordPress Translate Multilingual sites – TranslatePress plugin <= 2.7.5 - Cross Site Request Forgery (CSRF)…Cozmoslabs, Razvan Mocanu, Madalin Ungureanu, Cristophor…
CVE-2024-32728WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2024-31341WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerabilityCozmoslabs Profile Builder
CVE-2024-29143WordPress Passwordless Login plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityCozmoslabs, sareiodata Passwordless Login
CVE-2024-22142WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)Cozmoslabs Profile Builder Pro
CVE-2024-22141WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data ExposureCozmoslabs Profile Builder Pro
CVE-2024-22140WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)Cozmoslabs Profile Builder Pro
CVE-2024-1390Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing…cozmoslabs Paid Membership Subscriptions – Effortless…
CVE-2024-1389Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing…cozmoslabs Paid Membership Subscriptions – Effortless…
CVE-2024-12919Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 -…cozmoslabs Paid Membership Subscriptions – Effortless…
CVE-2024-12738User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated…cozmoslabs User Profile Builder – Beautiful User…
CVE-2024-11291Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 -…cozmoslabs Paid Membership Subscriptions – Effortless…
CVE-2024-10261Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 -…cozmoslabs Paid Membership Subscriptions – Effortless…
CVE-2024-0324User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via…cozmoslabs User Profile Builder – Beautiful User…
CVE-2023-6504Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcodecozmoslabs User Profile Builder – Beautiful User…
CVE-2023-51522WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerabilityCozmoslabs Paid Member Subscriptions
CVE-2023-47669WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)Cozmoslabs User Profile Builder – Beautiful User…
CVE-2023-25968WordPress Client Portal – Private user pages and login Plugin <= 1.1.8 is vulnerable to Cross Site Request Forgery…Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client…
CVE-2023-2297Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanismcozmoslabs User Profile Builder – Beautiful User…
CVE-2023-0814Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcodecozmoslabs User Profile Builder – Beautiful User…
CVE-2022-0653Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site ScriptingCozmoslabs Profile Builder – User Profile & User…
CVE-2021-36915WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerabilityCozmoslabs Profile Builder – User Profile & User…

62 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.