Skip to contentCozmoslabs vulnerabilities
Newest
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restrictionPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto RenewalCVE-2025-118355.3 Medium
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control VulnerabilityCVE-2025-586005.3 Medium
- cozmoslabs wp webhooks – automate repetitive tasks by creating powerful automation workflows directly within wordpressWP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File CopyCVE-2025-88959.8 Critical
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion VulnerabilityCVE-2025-540177.5 High
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2025-88966.4 Medium
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection VulnerabilityCVE-2025-498707.5 High
- cozmoslabs profile builderWordPress Profile Builder plugin <= 3.13.8 - Content Spoofing VulnerabilityCVE-2025-492924.3 Medium
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorProfile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare ShortcodesCVE-2025-46716.4 Medium
- cozmoslabs profile builder, unknown user profile builder +1 moreProfile Builder <= 3.12.0 - Admin+ Stored Cross Site ScriptingCVE-2024-67084.8 Medium
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-23146.4 Medium
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-310886.5 Medium
- cozmoslabs translatepressWordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection VulnerabilityCVE-2025-307737.2 High
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions +1 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_idCVE-2024-129199.8 Critical
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-127386.1 Medium
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions +1 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureCVE-2024-112915.3 Medium
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, paid member subscriptions +2 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2024-102617.3 High
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, iovamihai paid membership subscriptions effortless memberships recurring payments and content restriction +2 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site ScriptingCVE-2024-92226.1 Medium
- cozmoslabs profile builder, unknown user profile builder +1 moreprofile-builder <= 3.11.8 - Unauthenticated Privilege EscalationCVE-2024-66959.8 Critical
- cozmoslabs profile builder, unknown user profile builder +1 moreUser Profile Builder < 3.11.8 - Unauthenticated Media UploadCVE-2024-6366Public exploitEPSS 29.0%9.1 Critical
- cozmoslabs user profile pictureUser Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture UpdateCVE-2024-56394.3 Medium
- cozmoslabs profile builderWordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerabilityCVE-2024-313415.3 Medium
- cozmoslabs translatepressWordPress Translate Multilingual sites – TranslatePress plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-348274.3 Medium
- cozmoslabs paid member subscriptionsWordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-327284.3 Medium
- cozmoslabs paid member subscriptions, paid membership subscriptions +1 moreWordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2023-515224.3 Medium
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, iovamihai paid membership subscriptions effortless memberships recurring payments and content restriction +2 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_returnCVE-2024-13895.3 Medium
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions +1 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_pageCVE-2024-13904.3 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreUser Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_updateCVE-2024-0324Public exploit8.2 High
- cozmoslabs profile builder pro, profile builder +1 moreWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2024-221408.8 High
- cozmoslabs profile builder pro, profile builder +1 moreWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data ExposureCVE-2024-221416.5 Medium
- cozmoslabs profile builder pro, profile builder +1 moreWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)CVE-2024-221427.1 High
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta ShortcodeCVE-2023-65044.3 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreWordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-476695.4 Medium
- cozmoslabs profile builderProfile Builder < 3.9.8 - Unauthenticated Plugin's Pages CreationCVE-2023-40594.3 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset MechanismCVE-2023-22979.8 Critical
- cozmoslabs client portal, cozmoslabs, madalin ungureanu, antohe cristian client portal – private user pages and login +1 moreWordPress Client Portal – Private user pages and login Plugin <= 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-259684.3 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via ShortcodeCVE-2023-08146.5 Medium
- cozmoslabs custom post types and custom fields creatorWCK < 2.3.3 - Admin+ Stored XSSCVE-2022-44424.8 Medium
- cozmoslabs profile builder, profile builder – user profile & user registration forms (wordpress plugin) +1 moreWordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2021-369154.2 Medium
- cozmoslabs translatepress, unknown translate multilingual sites – translatepress +1 moreTranslatepress Multilinugal < 2.3.3 - Admin+ SQLiCVE-2022-3141Public exploit8.8 High
- cozmoslabs profile builder, unknown profile builder – user profile & user registration forms +1 moreProfile Builder < 3.6.8 - Admin+ Stored Cross-Site ScriptingCVE-2022-08844.8 Medium
- cozmoslabs profile builder – user profile & user registration forms, profile builder +1 moreProfile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site ScriptingCVE-2022-06536.1 Medium
- cozmoslabs translatepress, unknown translate multilingual sites – translatepress +1 moreTranslatePress < 2.0.9 - Authenticated Stored Cross-Site ScriptingCVE-2021-24610Public exploit4.8 Medium
- unknown membership & content restriction – paid member subscriptions, cozmoslabs membership \& content restriction - paid member subscriptions +1 morePaid Member Subscriptions < 2.4.2 - Authenticated SQL InjectionCVE-2021-247288.8 High
- cozmoslabs profile builder, unknown user registration & user profile – profile builder +1 moreProfile Builder < 3.4.9 - Admin Access via Password ResetCVE-2021-245279.8 Critical
- cozmoslabs user profile pictureUser Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDORCVE-2021-244735.4 Medium
- cozmoslabs profile builder, unknown user registration & user profile – profile builder +1 moreProfile Builder < 3.4.8 - Authenticated Stored XSSCVE-2021-244484.8 Medium
- cozmoslabs user profile pictureUser Profile Picture < 2.5.0 - Sensitive Information DisclosureCVE-2021-241707.5 High
- cozmoslabs profile builderThe profile-builder plugin before 2.1.4 for WordPress has no access control for activating or...CVE-2015-93377.5 High
- cozmoslabs profile builderThe profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.CVE-2016-109116.1 Medium
- cozmoslabs profile builderThe profile-builder plugin before 2.2.5 for WordPress has XSS.CVE-2015-93286.1 Medium
- Show moreLoading…