Product by Cozmoslabs

    Profile Builder Pro

    6 known vulnerabilities in Profile Builder Pro (Cozmoslabs), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Profile Builder Pro (Cozmoslabs)
    CriticalCVE-2026-27413

    WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-7647

    Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection

    		8.1
    HighCVE-2026-42385

    WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-22141

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure

    also in 1 other product

    		6.5
    HighCVE-2024-22140

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

    also in 1 other product

    		8.8
    HighCVE-2024-22142

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1

    All products by Cozmoslabs