Skip to contentCozmoslabs Profile Builder vulnerabilities
- cozmoslabs profile builder, unknown user profile builder +1 moreProfile Builder <= 3.12.0 - Admin+ Stored Cross Site ScriptingCVE-2024-67084.8 Medium
- cozmoslabs profile builder, unknown user profile builder +1 moreprofile-builder <= 3.11.8 - Unauthenticated Privilege EscalationCVE-2024-66959.8 Critical
- cozmoslabs profile builder, unknown user profile builder +1 moreUser Profile Builder < 3.11.8 - Unauthenticated Media UploadCVE-2024-6366Public exploitEPSS 29.0%9.1 Critical
- cozmoslabs profile builderWordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerabilityCVE-2024-313415.3 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreUser Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_updateCVE-2024-0324Public exploit8.2 High
- cozmoslabs profile builder pro, profile builder +1 moreWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2024-221408.8 High
- cozmoslabs profile builder pro, profile builder +1 moreWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data ExposureCVE-2024-221416.5 Medium
- cozmoslabs profile builder pro, profile builder +1 moreWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)CVE-2024-221427.1 High
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta ShortcodeCVE-2023-65044.3 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreWordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-476695.4 Medium
- cozmoslabs profile builderProfile Builder < 3.9.8 - Unauthenticated Plugin's Pages CreationCVE-2023-40594.3 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset MechanismCVE-2023-22979.8 Critical
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via ShortcodeCVE-2023-08146.5 Medium
- cozmoslabs profile builder, profile builder – user profile & user registration forms (wordpress plugin) +1 moreWordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2021-369154.2 Medium
- cozmoslabs profile builder, unknown profile builder – user profile & user registration forms +1 moreProfile Builder < 3.6.8 - Admin+ Stored Cross-Site ScriptingCVE-2022-08844.8 Medium
- cozmoslabs profile builder – user profile & user registration forms, profile builder +1 moreProfile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site ScriptingCVE-2022-06536.1 Medium
- cozmoslabs profile builder, unknown user registration & user profile – profile builder +1 moreProfile Builder < 3.4.9 - Admin Access via Password ResetCVE-2021-245279.8 Critical
- cozmoslabs profile builder, unknown user registration & user profile – profile builder +1 moreProfile Builder < 3.4.8 - Authenticated Stored XSSCVE-2021-244484.8 Medium
- cozmoslabs profile builderThe profile-builder plugin before 2.1.4 for WordPress has no access control for activating or...CVE-2015-93377.5 High
- cozmoslabs profile builderThe profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.CVE-2016-109116.1 Medium
- cozmoslabs profile builderThe profile-builder plugin before 2.2.5 for WordPress has XSS.CVE-2015-93286.1 Medium
- cozmoslabs profile builderThe profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.CVE-2014-103806.1 Medium
- cozmoslabs profile builderMultiple cross-site scripting (XSS) vulnerabilities in assets/misc/fallback-page.php in the...CVE-2014-84926.1 Medium