Cozmoslabs
- Total products in the ecosystem
- 13
- Total vulnerabilities (90 days)
- 33
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, Cozmoslabs recorded 33 security vulnerabilities in the last 90 days across 6 products, including 20 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor had the most security vulnerabilities in the Cozmoslabs ecosystem, with 10 vulnerabilities—approximately 30.3% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-58600WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control VulnerabilityCVE-2025-8895WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File CopyCVE-2025-54017WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion VulnerabilityCVE-2025-8896User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2025-49870WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2025-58600WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes |
| Affected productPaid Member Subscriptions |
| Published09/03/2025 |
| SeverityMedium |
CVE-2025-8895WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy | Exploitation statusNot exploited | FixYes | Affected productWP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress | Published08/21/2025 | SeverityCritical |
|---|
CVE-2025-54017WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability | Exploitation statusNot exploited | FixYes | Affected productPaid Member Subscriptions | Published08/20/2025 | SeverityHigh |
|---|
CVE-2025-8896User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published08/16/2025 | SeverityMedium |
|---|
CVE-2025-49870WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability | Exploitation statusNot exploited | FixYes | Affected productPaid Member Subscriptions | Published07/04/2025 | SeverityHigh |
|---|
CVE-2025-49292WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability | Exploitation statusNot exploited | FixYes | Affected productProfile Builder | Published06/06/2025 | SeverityMedium |
|---|
CVE-2025-4671Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published06/03/2025 | SeverityMedium |
|---|
CVE-2025-2314User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published04/16/2025 | SeverityMedium |
|---|
CVE-2025-31088WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability | Exploitation statusNot exploited | FixYes | Affected productPaid Member Subscriptions | Published03/28/2025 | SeverityMedium |
|---|
CVE-2025-30773WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability | Exploitation statusNot exploited | FixYes | Affected productTranslatePress | Published03/27/2025 | SeverityHigh |
|---|
CVE-2024-12919Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id | Exploitation statusNot exploited | FixYes | Affected productPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | Published01/14/2025 | SeverityCritical |
|---|
CVE-2024-12738User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published01/07/2025 | SeverityMedium |
|---|
CVE-2024-11291Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure | Exploitation statusNot exploited | FixYes | Affected productPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | Published12/18/2024 | SeverityMedium |
|---|
CVE-2024-10261Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution | Exploitation statusNot exploited | FixYes | Affected productPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | Published11/09/2024 | SeverityHigh |
|---|
CVE-2024-9222Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | Published10/02/2024 | SeverityMedium |
|---|
CVE-2024-5639User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update | Exploitation statusNot exploited | FixYes | Affected productUser Profile Picture | Published06/21/2024 | SeverityMedium |
|---|
CVE-2024-31341WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability | Exploitation statusNot exploited | FixYes | Affected productProfile Builder | Published05/17/2024 | SeverityMedium |
|---|
CVE-2024-32728WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPaid Member Subscriptions | Published04/24/2024 | SeverityMedium |
|---|
CVE-2023-51522WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPaid Member Subscriptions | Published03/15/2024 | SeverityMedium |
|---|
CVE-2024-1390Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page | Exploitation statusNot exploited | FixYes | Affected productPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | Published02/20/2024 | SeverityMedium |
|---|
CVE-2024-1389Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return | Exploitation statusNot exploited | FixYes | Affected productPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | Published02/20/2024 | SeverityMedium |
|---|
CVE-2024-0324User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published02/05/2024 | SeverityHigh |
|---|
CVE-2024-22140WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productProfile Builder Pro | Published01/31/2024 | SeverityHigh |
|---|
CVE-2024-22141WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure | Exploitation statusNot exploited | FixYes | Affected productProfile Builder Pro | Published01/24/2024 | SeverityMedium |
|---|
CVE-2024-22142WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS) | Exploitation statusNot exploited | FixYes | Affected productProfile Builder Pro | Published01/12/2024 | SeverityHigh |
|---|
CVE-2023-6504Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published01/11/2024 | SeverityMedium |
|---|
CVE-2023-47669WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published11/13/2023 | SeverityMedium |
|---|
CVE-2023-2297Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published04/26/2023 | SeverityCritical |
|---|
CVE-2023-0814Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode | Exploitation statusNot exploited | FixYes | Affected productUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | Published02/14/2023 | SeverityMedium |
|---|
CVE-2021-36915WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productProfile Builder – User Profile & User Registration Forms (WordPress plugin) | Published10/11/2022 | SeverityMedium |
|---|
CVE-2022-0653Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productProfile Builder – User Profile & User Registration Forms | Published02/24/2022 | SeverityMedium |
|---|
81 Results | Page 2 of 2