Known vulnerabilities in Cozmoslabs Profile Builder
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-54854 | Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions | 6.3 Medium | Oct 30, 2026 |
| CVE-2026-54855 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions | 7.1 High | Oct 30, 2026 |
| CVE-2026-54853 | Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly… | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-112242 | Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege… | 8.8 High | Oct 22, 2026 |
| CVE-2026-96338 | Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions | 6.5 Medium | Sep 30, 2026 |
| CVE-2026-66701 | Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions | 5.3 Medium | Aug 6, 2026 |
| CVE-2025-49292 | Improper Validation of Specified Quantity in Input vulnerability in Cozmoslabs Profile Builder profile-builder allows… | 4.3 Medium | Jun 6, 2025 |
| CVE-2024-31341 | Insufficient Verification of Data Authenticity vulnerability in Cozmoslabs Profile Builder allows Functionality… | 5.3 Medium | May 17, 2024 |
Other Cozmoslabs products
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 21
Paid Member Subscriptions 14
TranslatePress – Translate Multilingual sites with AI Translation 8
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 7
Profile Builder Pro 6
TranslatePress 5
profile_builder 3
paid_member_subscriptions 2
User Profile Picture 2
WP Webhooks 2
Profile Builder Plugin 1
Profile Builder – User Profile & User Registration Forms 1