Known vulnerabilities in Cozmoslabs Profile Builder Pro
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-42385 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions | 7.1 High | Jun 17, 2026 |
| CVE-2026-7647 | The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including… | 8.1 High | May 2, 2026 |
| CVE-2026-27413 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Profile… | 9.3 Critical | Mar 19, 2026 |
| CVE-2024-22140 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder… | 8.8 High | Jan 31, 2024 |
| CVE-2024-22141 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue… | 6.5 Medium | Jan 24, 2024 |
| CVE-2024-22142 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile… | 7.1 High | Jan 12, 2024 |
Other Cozmoslabs products
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 21
Paid Member Subscriptions 14
Profile Builder 8
TranslatePress – Translate Multilingual sites with AI Translation 8
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 7
TranslatePress 5
profile_builder 3
paid_member_subscriptions 2
User Profile Picture 2
WP Webhooks 2
Profile Builder Plugin 1
Profile Builder – User Profile & User Registration Forms 1