Login Request a demo
CO
Vendor
Cozmoslabs
16 products with CVEs on record
89
CVEs
0
On KEV
11
New 30D
Products
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
9.8
15 CVEs0 on KEV4 new
PB
Profile Builder
Cozmoslabs
9.8
26 CVEs0 on KEV2 new
PM
Paid Member Subscriptions
Cozmoslabs
8.5
10 CVEs0 on KEV3 new
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
9.8
8 CVEs0 on KEV1 new
TR
TranslatePress
Cozmoslabs
9.8
6 CVEs0 on KEV1 new
MC
Membership & Content Restriction - Paid Member Subscriptions
Cozmoslabs
9.8
7 CVEs0 on KEV0 new
UP
User Profile Picture
Cozmoslabs
7.5
4 CVEs0 on KEV0 new
PB
Profile Builder Pro
Cozmoslabs
9.3
3 CVEs0 on KEV0 new
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
5.3
2 CVEs0 on KEV0 new
WW
WP Webhooks
Cozmoslabs
9.0
2 CVEs0 on KEV0 new
CP
Client Portal
Cozmoslabs
8.8
1 CVEs0 on KEV0 new
CP
Custom Post Types And Custom Fields Creator
Cozmoslabs
4.8
1 CVEs0 on KEV0 new
PM
Paid Membership Subscriptions
Cozmoslabs
8.8
1 CVEs0 on KEV0 new
PB
Profile Builder Plugin
Cozmoslabs
7.3
1 CVEs0 on KEV0 new
PB
Profile Builder – User Profile & User Registration Forms (WordPress plugin)
Cozmoslabs
4.3
1 CVEs0 on KEV0 new
WW
WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress
cozmoslabs
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115807
New
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.1
0%
Oct 24User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute
CVE-2026-112842
New
PM
Paid Member Subscriptions
Cozmoslabs
6.5
0%
Oct 22WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability
CVE-2026-112242
New
PB
Profile Builder
Cozmoslabs
8.8
0%
Oct 22WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability
CVE-2026-107768
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
0%
Oct 16TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers
CVE-2026-100186
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.2
0%
Oct 16User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field
CVE-2026-109447
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
8.1
0%
Oct 16User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]
CVE-2026-107748
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Oct 16User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
CVE-2026-105317
PM
Paid Member Subscriptions
Cozmoslabs
8.5
0%
Oct 6WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability
CVE-2026-103062
TR
TranslatePress
Cozmoslabs
7.1
0%
Oct 4WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97249
PM
Paid Member Subscriptions
Cozmoslabs
5.3
0%
Sep 30WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability
CVE-2026-96338
PB
Profile Builder
Cozmoslabs
6.5
0%
Sep 30WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95866
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.2
0%
Sep 25User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field
CVE-2026-93656
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Sep 25User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field
CVE-2026-89412
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
1%
Sep 22TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panel
CVE-2026-6431
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
7.2
0%
Sep 7User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field
CVE-2026-75964
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.1
0%
Sep 1User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter
CVE-2026-75965
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Sep 1User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute
CVE-2026-82607
PB
Profile Builder Plugin
Cozmoslabs
7.3
0%
Aug 31Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted upload
CVE-2026-76053
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
1%
Aug 28TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser
CVE-2026-19632
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
9.8
5%
Aug 26TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure
CVE-2026-18512
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
6.4
0%
Aug 25TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor
CVE-2026-78267
TR
TranslatePress
Cozmoslabs
9.8
0%
Aug 24WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
CVE-2026-66582
TR
TranslatePress
Cozmoslabs
7.1
0%
Aug 20WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-75981
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
0%
Aug 19TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-15826
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
9.8
4%
Aug 15User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter
CVE-2026-66701
PB
Profile Builder
Cozmoslabs
5.3
0%
Aug 6WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability
CVE-2026-18510
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
7.2
0%
Aug 6TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
CVE-2026-17505
TT
TranslatePress – Translate Multilingual sites with AI Translation
cozmoslabs
6.1
1%
Aug 5TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting
CVE-2026-59539
PM
Paid Member Subscriptions
Cozmoslabs
7.5
0%
Jul 27WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-61971
UP
User Profile Picture
Cozmoslabs
2.7
0%
Jul 13WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-57348
PM
Paid Member Subscriptions
Cozmoslabs
7.2
0%
Jul 2WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-42385
PB
Profile Builder Pro
Cozmoslabs
7.1
0%
Jun 17WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39514
PM
Paid Member Subscriptions
Cozmoslabs
7.1
0%
Jun 15WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-7647
PB
Profile Builder Pro
Cozmoslabs
8.1
0%
May 2Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection
CVE-2026-3139
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
4.3
0%
Mar 31User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field
CVE-2026-27413
PB
Profile Builder Pro
Cozmoslabs
9.3
0%
Mar 19WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability
CVE-2025-68514
PM
Paid Member Subscriptions
Cozmoslabs
6.5
0%
Feb 20WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-66074
WW
WP Webhooks
Cozmoslabs
9.0
0%
Dec 18WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerability
CVE-2025-66073
WW
WP Webhooks
Cozmoslabs
7.2
0%
Nov 21WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Injection vulnerability
CVE-2025-13054
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Nov 19User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-58592
TR
TranslatePress
Cozmoslabs
8.1
0%
Nov 6WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability
CVE-2025-11835
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
5.3
0%
Nov 5Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal
CVE-2025-58600
PM
Paid Member Subscriptions
Cozmoslabs
5.3
0%
Sep 3WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability
CVE-2025-8895
WW
WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress
cozmoslabs
9.8
1%
Aug 21WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy
CVE-2025-54017
PM
Paid Member Subscriptions
Cozmoslabs
7.5
1%
Aug 20WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability
CVE-2025-8896
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Aug 16User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-49870
PM
Paid Member Subscriptions
Cozmoslabs
7.5
0%
Jul 4WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability
CVE-2025-49292
PB
Profile Builder
Cozmoslabs
4.3
0%
Jun 6WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability
CVE-2025-4671
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.4
0%
Jun 3Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes
CVE-2024-6708
PB
Profile Builder
Cozmoslabs
4.8
0%
May 15The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the admin area, which allows Admin+ users to…
CVE-2024-12919
MC
Membership & Content Restriction - Paid Member Subscriptions
Cozmoslabs
9.8
1%
Jan 14The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up…
CVE-2024-12738
UP
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
cozmoslabs
6.1
0%
Jan 7User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-11291
PM
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
cozmoslabs
5.3
0%
Dec 18Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-10261
MC
Membership & Content Restriction - Paid Member Subscriptions
Cozmoslabs
7.3
0%
Nov 9The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitrary shortcode execution in all…
CVE-2024-9222
MC
Membership & Content Restriction - Paid Member Subscriptions
Cozmoslabs
6.1
0%
Oct 2The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to…
CVE-2024-6695
PB
Profile Builder
Cozmoslabs
9.8
1%
Jul 31it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions
CVE-2024-6366
PB
Profile Builder
Cozmoslabs
9.1
29%
Jul 29The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload…
CVE-2024-5639
UP
User Profile Picture
Cozmoslabs
4.3
0%
Jun 21The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.1 via the 'rest_api_change_profile_image'…
CVE-2023-51522
PM
Paid Membership Subscriptions
Cozmoslabs
8.8
0%
Mar 15Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member Subscriptions: from n/a through 2.10.4
CVE-2024-1390
MC
Membership & Content Restriction - Paid Member Subscriptions
Cozmoslabs
4.3
1%
Feb 29The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to…