Vendor

    Cozmoslabs

    102 known vulnerabilities in products by Cozmoslabs, 0 of them actively exploited (CISA KEV).

    Key figures

    102

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cozmoslabs
    CriticalCVE-2026-19632

    Weak Password Recovery Mechanism for Forgotten Password (CVE-2026-19632)

    		9.8
    CriticalCVE-2026-15826

    Incorrect Type Conversion or Cast (CVE-2026-15826)

    		9.8
    CriticalCVE-2024-6366

    User Profile Builder < 3.11.8 - Unauthenticated Media Upload

    		9.1
    CriticalCVE-2021-24527

    Profile Builder < 3.4.9 - Admin Access via Password Reset

    		9.8
    CriticalCVE-2024-6695

    profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation

    		9.8
    HighCVE-2022-3141

    Translatepress Multilinugal < 2.3.3 - Admin+ SQLi

    		8.8
    HighCVE-2021-24170

    User Profile Picture < 2.5.0 - Sensitive Information Disclosure

    		7.5
    HighCVE-2024-0324

    Cozmoslabs Profile Builder: Improper Access Control

    		8.2
    MediumCVE-2021-24610

    TranslatePress < 2.0.9 - Authenticated Stored Cross-Site Scripting

    		4.8
    HighCVE-2021-24728

    Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection

    		8.8
    MediumCVE-2022-0653

    Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting

    		6.1
    CriticalCVE-2026-78267

    WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability

    		9.8
    HighCVE-2026-76053

    Cross-site Scripting (CVE-2026-76053)

    		7.2
    CriticalCVE-2023-2297

    Cozmoslabs Profile Builder: Unverified Password Change

    		9.8
    CriticalCVE-2025-8895

    WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy

    		9.8
    HighCVE-2026-112242

    WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability

    		8.8
    MediumCVE-2026-17505

    TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2026-89412

    Cross-site Scripting (CVE-2026-89412)

    		7.2
    HighCVE-2015-9337

    Cozmoslabs Profile Builder: security vulnerability

    		7.5
    HighCVE-2026-109447

    Improper Privilege Management (CVE-2026-109447)

    		8.1
    CriticalCVE-2024-12919

    Cozmoslabs Membership \& Content Restriction - Paid Member Subscriptions: Improper Authentication

    		9.8
    HighCVE-2026-82607

    Cozmoslabs Profile Builder Plugin: Unrestricted Upload of File with Dangerous Type

    		7.3
    HighCVE-2026-105317

    WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-6431

    Cross-site Scripting (CVE-2026-6431)

    		7.2
    CriticalCVE-2026-27413

    WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability

    		9.3

    All vulnerabilities in search

    Products

    Products by Cozmoslabs
    Cozmoslabs Profile Builder320
    User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor210
    Paid Member Subscriptions150
    Translatepress – Translate Multilingual Sites With AI Translation100
    Cozmoslabs TranslatePress80
    Membership \& Content Restriction - Paid Member Subscriptions70
    Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction70
    Profile Builder Pro60
    User Profile Picture50