Login Request a demo
PB
Product
Profile Builder
by Cozmoslabs · last CVE Oct 22, 2026
26
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities26In the news0Timeline
Severity mix
Critical 3High 7Medium 16Low 0
Severity
All severities26Critical3High7Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Profile Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112242
8.8
0%
Oct 22
WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability
Affected: through 4.0.4
CVE-2024-22140
8.8
0%
Jan 31
Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0
Affected: through 3.10.0
CVE-2023-47669
8.8
0%
Nov 13
Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 3.10.3 versions
Affected: before 3.10.4
CVE-2023-2297
8.1
1%
Apr 27
The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0
Affected: through 3.9.0
CVE-2024-0324
7.5
2%
Feb 5
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized modification of data due to a…
Affected: through 3.10.8
CVE-2024-22141
7.5
0%
Jan 24
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0
Affected: through 3.10.0
CVE-2015-9337
7.5
1%
Aug 22
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX
Affected: before 2.1.4
Showing 7