Advisories · Technology

Cozmoslabs Profile Builder.

Every CVE that names Cozmoslabs Profile Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54855 CVE record

CVSS 7.1 High

WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs Profile Builder
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-54854 CVE record

CVSS 6.3 Medium

WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerability
- Cozmoslabs Profile Builder
- Privilege escalation
Not analysed yet 30 Oct 2026
CVE-2026-54853 CVE record

CVSS 5.3 Medium

WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability
- Cozmoslabs Profile Builder
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-112242 CVE record

CVSS 8.8 High

WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability
- Cozmoslabs Profile Builder
- Privilege escalation
Not analysed yet 22 Oct 2026
CVE-2026-96338 CVE record

CVSS 6.5 Medium

WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs Profile Builder
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-66701 CVE record

CVSS 5.3 Medium

WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability
- Cozmoslabs Profile Builder
- Broken access control
Not analysed yet 6 Aug 2026
CVE-2025-49292 CVE record

CVSS 4.3 Medium

WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability
- Cozmoslabs Profile Builder
- CWE-1284
Not analysed yet 6 Jun 2025
CVE-2024-31341 CVE record

CVSS 5.3 Medium

WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability
- Cozmoslabs Profile Builder
- CWE-345
Not analysed yet 17 May 2024