Advisories · Technology

Cozmoslabs Profile Builder Pro.

Every CVE that names Cozmoslabs Profile Builder Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42385 CVE record

CVSS 7.1 High

WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs Profile Builder Pro
- Cross-site scripting (XSS)
Not analysed yet 17 Jun 2026
CVE-2026-7647 CVE record

CVSS 8.1 High

Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection
- Cozmoslabs Profile Builder Pro
- Insecure deserialization
Not analysed yet 2 May 2026
CVE-2026-27413 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability
- Cozmoslabs Profile Builder Pro
- SQL injection
Not analysed yet 19 Mar 2026
CVE-2024-22140 CVE record

CVSS 8.8 High

WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)
- Cozmoslabs Profile Builder Pro
- Cross-site request forgery (CSRF)
Not analysed yet 31 Jan 2024
CVE-2024-22141 CVE record

CVSS 6.5 Medium

WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure
- Cozmoslabs Profile Builder Pro
- Information disclosure
Not analysed yet 24 Jan 2024
CVE-2024-22142 CVE record

CVSS 7.1 High

WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)
- Cozmoslabs Profile Builder Pro
- Cross-site scripting (XSS)
Not analysed yet 12 Jan 2024