Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Cozmoslabs
Profile Builder

cozmoslabs profile builder Vulnerabilities: CVEs, CISA KEV & Security Advisories

26 CVEs

CL

cozmoslabs profile builder Vulnerabilities

CVE security advisories and vulnerability history for profile builder by cozmoslabs.

26

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

10

Public exploits

PoC or exploit code

6.6

Avg CVSS

2017–2026

Last updated September 30, 2026

Overview

cozmoslabs profile builder has 26 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

Severity and exploitation

How the CVSS severity of cozmoslabs profile builder's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High6

Medium16

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of cozmoslabs profile builder's CVEs are currently listed in CISA's KEV catalog.

Public exploits

10

10 of cozmoslabs profile builder's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every cozmoslabs profile builder version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.10.03 CVEs
<= 3.9.02 CVEs
< 1.1.661 CVE
< 2.1.41 CVE
< 2.2.51 CVE
< 2.4.21 CVE
< 3.10.41 CVE
< 3.11.81 CVE
< 3.11.91 CVE
< 3.12.21 CVE
< 3.4.81 CVE
< 3.4.91 CVE
< 3.6.81 CVE
< 3.9.81 CVE
<= 2.0.21 CVE
<= 3.10.71 CVE
<= 3.10.81 CVE
<= 3.11.21 CVE
<= 3.13.81 CVE
<= 3.16.51 CVE
<= 3.6.01 CVE
<= 3.6.11 CVE
<= 4.0.21 CVE
>= 3.11.31 CVE
>= 3.13.91 CVE
>= 3.16.61 CVE
>= 4.0.31 CVE

Fixed in

1.1.661 CVE
2.1.41 CVE
2.2.51 CVE
2.4.21 CVE
3.10.41 CVE
3.11.31 CVE
3.11.81 CVE
3.11.91 CVE
3.12.21 CVE
3.13.91 CVE
3.16.61 CVE
3.4.81 CVE
3.4.91 CVE
3.6.81 CVE

Find a version

26 CVEs

Sort

WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96338
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (11th pct)2026-09-30
WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability
CVE-2026-66701
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2026-08-06
WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability
CVE-2025-49292
Patch
CWE-1284
Medium · CVSS 4.3
EPSS 0.3% (22th pct)2025-06-06
Medium vulnerability · 2025-05-15
CVE-2024-6708
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.4% (28th pct)2025-05-15
Critical vulnerability · 2024-07-31
CVE-2024-6695
Public exploit
Patch
CWE-863
Critical · CVSS 9.8
EPSS 0.8% (56th pct)2024-07-31
Critical vulnerability · 2024-07-29
CVE-2024-6366
Public exploit
Patch
CWE-434
Critical · CVSS 9.1
EPSS 29.0% (98th pct)2024-07-29
WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability
CVE-2024-31341
Patch
CWE-345
Medium · CVSS 5.3
EPSS 0.2% (12th pct)2024-05-17
User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update
CVE-2024-0324CWE-284
High · CVSS 8.2
EPSS 2.4% (84th pct)2024-02-05
WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2024-22140
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (17th pct)2024-01-31
WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure
CVE-2024-22141
Patch
CWE-200
High · CVSS 7.5
EPSS 0.5% (41th pct)2024-01-24
WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-22142
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (25th pct)2024-01-12
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
CVE-2023-6504CWE-862
Medium · CVSS 4.3
EPSS 0.3% (27th pct)2024-01-11
WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-47669
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (16th pct)2023-11-13
Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation
CVE-2023-4059
Public exploit
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.2% (13th pct)2023-09-04
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
CVE-2023-2297
Public exploit
CWE-620
Critical · CVSS 9.8
EPSS 1.0% (62th pct)2023-04-26
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
CVE-2023-0814CWE-200
Medium · CVSS 6.5
EPSS 0.8% (55th pct)2023-02-14
WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2021-36915
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.3% (21th pct)2022-10-11
Medium vulnerability · 2022-04-04
CVE-2022-0884
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.7% (50th pct)2022-04-04
Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting
CVE-2022-0653
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 2.7% (86th pct)2022-02-24
Critical vulnerability · 2021-08-16
CVE-2021-24527
Public exploit
Patch
CWE-287
Critical · CVSS 9.8
EPSS 7.6% (95th pct)2021-08-16
Medium vulnerability · 2021-08-02
CVE-2021-24448
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (48th pct)2021-08-02
High vulnerability · 2019-08-22
CVE-2015-9337
Patch
CWE-284
High · CVSS 7.5
EPSS 1.3% (71th pct)2019-08-22
Medium vulnerability · 2019-08-21
CVE-2016-10911
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.9% (59th pct)2019-08-21
Medium vulnerability · 2019-08-21
CVE-2015-9328
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.9% (59th pct)2019-08-21
Medium vulnerability · 2019-08-21
CVE-2014-10380
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.9% (59th pct)2019-08-21
Medium vulnerability · 2017-10-06
CVE-2014-8492
Public exploit
CWE-79
Medium · CVSS 6.1
EPSS 1.2% (68th pct)2017-10-06

Common weakness types

The CWE weakness categories most often found in cozmoslabs profile builder CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-1284Improper Validation of Specified Quantity in Input1 CVE
CWE-863Incorrect Authorization1 CVE
CWE-287Improper Authentication1 CVE

Disclosure activity by year

How many cozmoslabs profile builder CVEs were published each year.

2017

1

2019

4

2021

2

2022

3

2023

4

2024

8

2025

2

2026

2

Other cozmoslabs products

Browse vulnerabilities for other products by cozmoslabs.

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor20 CVEs Paid Member Subscriptions13 CVEs TranslatePress – Translate Multilingual sites with AI Translation8 CVEs membership & content restriction - paid member subscriptions7 CVEs Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction7 CVEs TranslatePress7 CVEs Profile Builder Pro6 CVEs user profile picture4 CVEs

All cozmoslabs vulnerabilities

Frequently asked questions

Common questions about cozmoslabs profile builder vulnerabilities.

How many CVEs does cozmoslabs profile builder have?: cozmoslabs profile builder has 26 published CVE records since 2017.
How many cozmoslabs profile builder CVEs are in CISA KEV?: None of cozmoslabs profile builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for cozmoslabs profile builder vulnerabilities?: Yes — 10 of cozmoslabs profile builder's CVEs have a known public exploit.
Which versions of cozmoslabs profile builder are affected?: 43 distinct cozmoslabs profile builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in cozmoslabs profile builder CVEs?: cozmoslabs profile builder's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-284 (Improper Access Control).
How many critical cozmoslabs profile builder vulnerabilities are there?: cozmoslabs profile builder has 4 critical and 6 high-severity CVEs.
What is the average severity of cozmoslabs profile builder CVEs?: The average CVSS base score across cozmoslabs profile builder's scored CVEs is 6.6.

References

All cozmoslabs vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track cozmoslabs profile builder vulnerabilities

Get an alert for each new cozmoslabs profile builder CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

3.9.8

1 CVE

4.0.31 CVE