How many cozmoslabs Profile Builder Pro CVEs are in CISA KEV?

None of cozmoslabs Profile Builder Pro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of cozmoslabs Profile Builder Pro are affected?

10 distinct cozmoslabs Profile Builder Pro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in cozmoslabs Profile Builder Pro CVEs?

cozmoslabs Profile Builder Pro's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-502 (Deserialization of Untrusted Data).

How many critical cozmoslabs Profile Builder Pro vulnerabilities are there?

cozmoslabs Profile Builder Pro has 1 critical and 5 high-severity CVEs.

What is the average severity of cozmoslabs Profile Builder Pro CVEs?

The average CVSS base score across cozmoslabs Profile Builder Pro's scored CVEs is 8.0.

RadicalNotion.AI

Log in Create an account

cozmoslabs

6 CVEs

cozmoslabs Profile Builder Pro Vulnerabilities

Name: cozmoslabs Profile Builder Pro vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Profile Builder Pro by cozmoslabs.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.0

Avg CVSS

2024–2026

Last updated June 17, 2026

Overview

cozmoslabs Profile Builder Pro has 6 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

Severity and exploitation

How the CVSS severity of cozmoslabs Profile Builder Pro's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of cozmoslabs Profile Builder Pro's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No cozmoslabs Profile Builder Pro CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every cozmoslabs Profile Builder Pro version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.10.03 CVEs
>= 3.10.13 CVEs
< 3.14.01 CVE
<= 3.14.51 CVE
<= 3.15.01 CVE
>= 3.14.01 CVE
>= 3.15.11 CVE

Fixed in

3.10.13 CVEs
3.14.01 CVE
3.15.11 CVE

Find a version

6 CVEs

Sort

WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42385
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (15th pct)2026-06-17
Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection
CVE-2026-7647CWE-502
High · CVSS 8.1
EPSS 0.6% (49th pct)2026-05-02
WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability
CVE-2026-27413
Patch
CWE-89
Critical · CVSS 9.3
EPSS 0.4% (34th pct)2026-03-19
WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2024-22140
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (17th pct)2024-01-31
WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure
CVE-2024-22141
Patch
CWE-200
High · CVSS 7.5
EPSS 0.5% (41th pct)2024-01-24
WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-22142
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (25th pct)2024-01-12

Common weakness types

The CWE weakness categories most often found in cozmoslabs Profile Builder Pro CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many cozmoslabs Profile Builder Pro CVEs were published each year.

2024

3

2026

3

Other cozmoslabs products

Browse vulnerabilities for other products by cozmoslabs.

profile builder26 CVEs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor20 CVEs Paid Member Subscriptions13 CVEs TranslatePress – Translate Multilingual sites with AI Translation8 CVEs membership & content restriction - paid member subscriptions7 CVEs Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction7 CVEs TranslatePress7 CVEs user profile picture4 CVEs

All cozmoslabs vulnerabilities

Frequently asked questions

Common questions about cozmoslabs Profile Builder Pro vulnerabilities.

How many CVEs does cozmoslabs Profile Builder Pro have?: cozmoslabs Profile Builder Pro has 6 published CVE records since 2024.
How many cozmoslabs Profile Builder Pro CVEs are in CISA KEV?: None of cozmoslabs Profile Builder Pro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for cozmoslabs Profile Builder Pro vulnerabilities?: No cozmoslabs Profile Builder Pro CVEs currently have a tracked public exploit in this dataset.
Which versions of cozmoslabs Profile Builder Pro are affected?: 10 distinct cozmoslabs Profile Builder Pro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in cozmoslabs Profile Builder Pro CVEs?: cozmoslabs Profile Builder Pro's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-502 (Deserialization of Untrusted Data).
How many critical cozmoslabs Profile Builder Pro vulnerabilities are there?: cozmoslabs Profile Builder Pro has 1 critical and 5 high-severity CVEs.
What is the average severity of cozmoslabs Profile Builder Pro CVEs?: The average CVSS base score across cozmoslabs Profile Builder Pro's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track cozmoslabs Profile Builder Pro vulnerabilities

Get an alert for each new cozmoslabs Profile Builder Pro CVE, with AI-written analysis and remediation steps.

Create an account See pricing