Product by Cozmoslabs

    Cozmoslabs Profile Builder

    32 known vulnerabilities in Cozmoslabs Profile Builder (Cozmoslabs), 0 of them actively exploited (CISA KEV).

    Key figures

    32

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cozmoslabs Profile Builder (Cozmoslabs)
    CriticalCVE-2024-6366

    User Profile Builder < 3.11.8 - Unauthenticated Media Upload

    		9.1
    CriticalCVE-2021-24527

    Profile Builder < 3.4.9 - Admin Access via Password Reset

    		9.8
    CriticalCVE-2024-6695

    profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation

    		9.8
    HighCVE-2024-0324

    Cozmoslabs Profile Builder: Improper Access Control

    also in 1 other product

    		8.2
    MediumCVE-2022-0653

    Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting

    		6.1
    CriticalCVE-2023-2297

    Cozmoslabs Profile Builder: Unverified Password Change

    also in 1 other product

    		9.8
    HighCVE-2026-112242

    WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability

    		8.8
    HighCVE-2015-9337

    Cozmoslabs Profile Builder: security vulnerability

    		7.5
    MediumCVE-2014-8492

    Cozmoslabs Profile Builder: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2026-54855

    WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-54854

    WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerability

    		6.3
    MediumCVE-2026-125777

    WordPress Profile Builder plugin <= 4.0.6 - Sensitive Data Exposure vulnerability

    		5.3
    MediumCVE-2026-96338

    WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-125776

    WordPress Profile Builder plugin <= 4.0.6 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2015-9328

    Cozmoslabs Profile Builder: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2016-10911

    Cozmoslabs Profile Builder: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2014-10380

    Cozmoslabs Profile Builder: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2023-0814

    Cozmoslabs Profile Builder: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		6.5
    MediumCVE-2026-54853

    WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-66701

    WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

    		5.3
    HighCVE-2024-22141

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure

    also in 1 other product

    		6.5
    HighCVE-2024-22140

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

    also in 1 other product

    		8.8
    MediumCVE-2022-0884

    Profile Builder < 3.6.8 - Admin+ Stored Cross-Site Scripting

    		4.8
    HighCVE-2024-22142

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    MediumCVE-2021-24448

    Profile Builder < 3.4.8 - Authenticated Stored XSS

    		4.8

    All vulnerabilities in search

    All products by Cozmoslabs