Login Request a demo
CO
Vendor
Cozmoslabs
16 products with CVEs on record
99
CVEs
0
On KEV
12
New 30D
Products
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
9.8
16 CVEs0 on KEV4 new
PB
Profile Builder
Cozmoslabs
9.8
28 CVEs0 on KEV3 new
PM
Paid Member Subscriptions
Cozmoslabs
8.5
13 CVEs0 on KEV3 new
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
9.8
8 CVEs0 on KEV1 new
TR
TranslatePress
Cozmoslabs
9.8
7 CVEs0 on KEV1 new
MC
Membership & Content Restriction - Paid Member Subscriptions
Cozmoslabs
9.8
7 CVEs0 on KEV0 new
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
9.8
5 CVEs0 on KEV0 new
UP
User Profile Picture
cozmoslabs
7.5
4 CVEs0 on KEV0 new
PB
Profile Builder Pro
Cozmoslabs
9.3
3 CVEs0 on KEV0 new
WW
WP Webhooks
Cozmoslabs
9.0
2 CVEs0 on KEV0 new
CP
Client Portal
Cozmoslabs
8.8
1 CVEs0 on KEV0 new
CP
Custom Post Types And Custom Fields Creator
Cozmoslabs
4.8
1 CVEs0 on KEV0 new
PM
Paid Membership Subscriptions
Cozmoslabs
8.8
1 CVEs0 on KEV0 new
PB
Profile Builder Plugin
Cozmoslabs
7.3
1 CVEs0 on KEV0 new
PB
Profile Builder – User Profile & User Registration Forms (WordPress plugin)
Cozmoslabs
4.3
1 CVEs0 on KEV0 new
WW
WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress
cozmoslabs
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-54853
New
PB
Profile Builder
Cozmoslabs
5.3–Oct 29WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability
CVE-2026-115807
New
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.1
0%
Oct 24User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute
CVE-2026-112842
PM
Paid Member Subscriptions
Cozmoslabs
6.5
0%
Oct 22WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability
CVE-2026-112242
PB
Profile Builder
Cozmoslabs
8.8
0%
Oct 22WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability
CVE-2026-107768
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
0%
Oct 16TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers
CVE-2026-100186
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.2
0%
Oct 16User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field
CVE-2026-109447
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
8.1
0%
Oct 16User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]
CVE-2026-107748
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Oct 16User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
CVE-2026-105317
PM
Paid Member Subscriptions
Cozmoslabs
8.5
0%
Oct 6WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability
CVE-2026-103062
TR
TranslatePress
Cozmoslabs
7.1
0%
Oct 4WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97249
PM
Paid Member Subscriptions
Cozmoslabs
5.3
0%
Sep 30WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability
CVE-2026-96338
PB
Profile Builder
Cozmoslabs
6.5
0%
Sep 30WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95866
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.2
0%
Sep 25User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field
CVE-2026-93656
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Sep 25User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field
CVE-2026-89412
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
1%
Sep 22TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panel
CVE-2026-6431
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.2
0%
Sep 7User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field
CVE-2026-75964
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.1
0%
Sep 1User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter
CVE-2026-75965
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Sep 1User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute
CVE-2026-82607
PB
Profile Builder Plugin
Cozmoslabs
7.3
0%
Aug 31Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted upload
CVE-2026-76053
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
1%
Aug 28TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser
CVE-2026-19632
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
9.8
5%
Aug 26TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure
CVE-2026-18512
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
6.4
0%
Aug 25TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor
CVE-2026-78267
TR
TranslatePress
Cozmoslabs
9.8
0%
Aug 24WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
CVE-2026-66582
TR
TranslatePress
Cozmoslabs
7.1
0%
Aug 20WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-75981
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
0%
Aug 19TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-15826
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
9.8
4%
Aug 15User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter
CVE-2026-66701
PB
Profile Builder
Cozmoslabs
5.3
0%
Aug 6WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability
CVE-2026-18510
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
0%
Aug 6TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
CVE-2026-17505
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
6.1
1%
Aug 5TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting
CVE-2026-59539
PM
Paid Member Subscriptions
Cozmoslabs
7.5
0%
Jul 27WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-61971
UP
User Profile Picture
Cozmoslabs
2.7
0%
Jul 13WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-57348
PM
Paid Member Subscriptions
Cozmoslabs
7.2
0%
Jul 2WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-42385
PB
Profile Builder Pro
Cozmoslabs
7.1
0%
Jun 17WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39514
PM
Paid Member Subscriptions
Cozmoslabs
7.1
0%
Jun 15WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-7647
PB
Profile Builder Pro
Cozmoslabs
8.1
0%
May 2Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection
CVE-2026-3139
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
4.3
0%
Mar 31User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field
CVE-2026-27413
PB
Profile Builder Pro
Cozmoslabs
9.3
0%
Mar 19WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability
CVE-2025-68514
PM
Paid Member Subscriptions
Cozmoslabs
6.5
0%
Feb 20WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-66074
WW
WP Webhooks
Cozmoslabs
9.0
0%
Dec 18WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerability
CVE-2025-66073
WW
WP Webhooks
Cozmoslabs
7.2
0%
Nov 21WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Injection vulnerability
CVE-2025-13054
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Nov 19User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-58592
TR
TranslatePress
Cozmoslabs
8.1
0%
Nov 6WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability
CVE-2025-11835
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
5.3
0%
Nov 5Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal
CVE-2025-58600
PM
Paid Member Subscriptions
Cozmoslabs
5.3
0%
Sep 3WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability
CVE-2025-8895
WW
WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress
cozmoslabs
9.8
1%
Aug 21WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy
CVE-2025-54017
PM
Paid Member Subscriptions
Cozmoslabs
7.5
1%
Aug 20WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability
CVE-2025-8896
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Aug 16User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-49870
PM
Paid Member Subscriptions
Cozmoslabs
7.5
0%
Jul 4WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability
CVE-2025-49292
PB
Profile Builder
Cozmoslabs
4.3
0%
Jun 6WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability
CVE-2025-4671
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Jun 3Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes
CVE-2024-6708
PB
Profile Builder
Cozmoslabs
4.8
0%
May 15Profile Builder <= 3.12.0 - Admin+ Stored Cross Site Scripting
CVE-2025-2314
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Apr 16User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-31088
PM
Paid Member Subscriptions
Cozmoslabs
6.5
0%
Mar 28WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30773
TR
TranslatePress
Cozmoslabs
7.2
1%
Mar 27WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability
CVE-2024-12919
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
9.8
1%
Jan 14Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
CVE-2024-12738
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.1
0%
Jan 7User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-11291
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
5.3
0%
Dec 18Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-10261
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
7.3
0%
Nov 9Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-9222
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
6.1
0%
Oct 2Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting
CVE-2024-6695
PB
Profile Builder
Cozmoslabs
9.8
1%
Jul 31profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation