How many cozmoslabs user profile picture CVEs are in CISA KEV?

None of cozmoslabs user profile picture's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of cozmoslabs user profile picture are affected?

10 distinct cozmoslabs user profile picture versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in cozmoslabs user profile picture CVEs?

cozmoslabs user profile picture's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

What is the average severity of cozmoslabs user profile picture CVEs?

The average CVSS base score across cozmoslabs user profile picture's scored CVEs is 5.0.

RadicalNotion.AI

Log in Create an account

cozmoslabs

4 CVEs

cozmoslabs user profile picture Vulnerabilities

Name: cozmoslabs user profile picture vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for user profile picture by cozmoslabs.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

5.0

Avg CVSS

2021–2026

Last updated July 13, 2026

Overview

cozmoslabs user profile picture has 4 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 5.0.

Severity and exploitation

How the CVSS severity of cozmoslabs user profile picture's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium2

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of cozmoslabs user profile picture's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of cozmoslabs user profile picture's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every cozmoslabs user profile picture version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.5.01 CVE
< 2.6.01 CVE
< 2.6.21 CVE
<= 2.6.11 CVE
<= 2.6.31 CVE
>= 2.6.41 CVE

Fixed in

2.5.01 CVE
2.6.01 CVE
2.6.21 CVE
2.6.41 CVE

Find a version

4 CVEs

Sort

WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-61971
Patch
CWE-639
Low · CVSS 2.7
EPSS 0.3% (23th pct)2026-07-13
User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update
CVE-2024-5639
Patch
CWE-639
Medium · CVSS 4.3
EPSS 0.4% (34th pct)2024-06-21
Medium vulnerability · 2021-08-02
CVE-2021-24473
Public exploit
Patch
CWE-639
Medium · CVSS 5.4
EPSS 0.8% (55th pct)2021-08-02
High vulnerability · 2021-04-05
CVE-2021-24170
Public exploit
Patch
CWE-200
High · CVSS 7.5
EPSS 4.8% (92th pct)2021-04-05

Common weakness types

The CWE weakness categories most often found in cozmoslabs user profile picture CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many cozmoslabs user profile picture CVEs were published each year.

2021

2

2024

1

2026

1

Other cozmoslabs products

Browse vulnerabilities for other products by cozmoslabs.

profile builder26 CVEs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor20 CVEs Paid Member Subscriptions13 CVEs TranslatePress – Translate Multilingual sites with AI Translation8 CVEs membership & content restriction - paid member subscriptions7 CVEs Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction7 CVEs TranslatePress7 CVEs Profile Builder Pro6 CVEs

All cozmoslabs vulnerabilities

Frequently asked questions

Common questions about cozmoslabs user profile picture vulnerabilities.

How many CVEs does cozmoslabs user profile picture have?: cozmoslabs user profile picture has 4 published CVE records since 2021.
How many cozmoslabs user profile picture CVEs are in CISA KEV?: None of cozmoslabs user profile picture's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for cozmoslabs user profile picture vulnerabilities?: Yes — 2 of cozmoslabs user profile picture's CVEs have a known public exploit.
Which versions of cozmoslabs user profile picture are affected?: 10 distinct cozmoslabs user profile picture versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in cozmoslabs user profile picture CVEs?: cozmoslabs user profile picture's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
What is the average severity of cozmoslabs user profile picture CVEs?: The average CVSS base score across cozmoslabs user profile picture's scored CVEs is 5.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track cozmoslabs user profile picture vulnerabilities

Get an alert for each new cozmoslabs user profile picture CVE, with AI-written analysis and remediation steps.

Create an account See pricing