Cozmoslabs vulnerabilities
83 published CVEs name Cozmoslabs among the affected products.
- 83Published CVEs83 of them scored
- 50Last 12 monthspublished in the last year
- 8Critical32 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125776
WordPress Profile Builder plugin <= 4.0.6 - Broken Access Control vulnerability
Cozmoslabs · Profile Builder
Medium5.3 - CVE-2026-125777
WordPress Profile Builder plugin <= 4.0.6 - Sensitive Data Exposure vulnerability
Cozmoslabs · Profile Builder
Medium5.3 - CVE-2026-121765
WordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerability
Cozmoslabs · TranslatePress
High7.1 - CVE-2026-119523
WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerability
Cozmoslabs · Paid Member Subscriptions
Medium5.3 - CVE-2026-120537
TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary Endpoint
cozmoslabs · TranslatePress – Translate Multilingual sites with AI Translation
High7.2 - CVE-2026-119167
TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack Bypass
cozmoslabs · TranslatePress – Translate Multilingual sites with AI Translation
High7.2 - CVE-2026-119521
WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
Cozmoslabs · Paid Member Subscriptions
Medium6.5 - CVE-2026-54855
WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
Cozmoslabs · Profile Builder
High7.1 - CVE-2026-54854
WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerability
Cozmoslabs · Profile Builder
Medium6.3 - CVE-2026-54853
WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability
Cozmoslabs · Profile Builder
Medium5.3