[ Vendor · 12 CVEs ]
cozmoslabs
CVEs affecting cozmoslabs published in the last 30 days, plus any cozmoslabs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112842 | 22 Oct 2026 | CVSS 6.5 | Cozmoslabs Paid Member SubscriptionsMissing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access… | |
| CVE-2026-112242 | 22 Oct 2026 | CVSS 8.8 | Cozmoslabs Profile BuilderIncorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile… | |
| CVE-2026-107768 | 16 Oct 2026 | CVSS 7.2 | cozmoslabs TranslatePress – Translate Multilingual sites with AI TranslationThe TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | |
| CVE-2026-109447 | 16 Oct 2026 | CVSS 8.1 | cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role EditorThe User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege… | |
| CVE-2026-107748 | 16 Oct 2026 | CVSS 6.4 | cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role EditorThe User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored… | |
| CVE-2026-100186 | 16 Oct 2026 | CVSS 7.2 | cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role EditorThe User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored… | |
| CVE-2026-105317 | 6 Oct 2026 | CVSS 8.5 | Cozmoslabs Paid Member SubscriptionsSubscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions. | |
| CVE-2026-103062 | 4 Oct 2026 | CVSS 7.1 | Cozmoslabs TranslatePressImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress… | |
| CVE-2026-97249 | 30 Sep 2026 | CVSS 5.3 | Cozmoslabs Paid Member SubscriptionsUnauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions. | |
| CVE-2026-96338 | 30 Sep 2026 | CVSS 6.5 | Cozmoslabs Profile BuilderSubscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions. | |
| CVE-2026-95866 | 25 Sep 2026 | CVSS 7.2 | cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role EditorThe User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored… | |
| CVE-2026-93656 | 25 Sep 2026 | CVSS 6.4 | cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role EditorThe User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored… |