Known Vulnerabilities for Profile Builder by Cozmoslabs
Listed below are 10 of the newest known vulnerabilities associated with "Profile Builder" by "Cozmoslabs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88890 json | OpenPanel through commit cd24bb8 contains an SQL injection vulnerability in the analytics filter builder that fails to valida... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-82607 json | A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the functio... | Not Provided | 2026-08-31 | 2026-08-31 |
| CVE-2026-76548 json | The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, grantin... | Not Provided | 2026-08-29 | 2026-08-30 |
| CVE-2026-76547 json | The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing ... | Not Provided | 2026-08-29 | 2026-08-30 |
| CVE-2026-76546 json | The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowin... | Not Provided | 2026-08-29 | 2026-08-30 |
| CVE-2026-75965 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-75964 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-66701 json | Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions. | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-42385 json | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions. | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2026-16568 json | The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not... | Not Provided | 2026-08-27 | 2026-08-27 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cozmoslabs | Profile Builder | 3.0.1 | |||
| Application | Cozmoslabs | Profile Builder | 3.0.0 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.9 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.8 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.7 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.6 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.5 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.4 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.3 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.2 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.1 | |||
| Application | Cozmoslabs | Profile Builder | 2.9.0 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.9 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.8 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.7 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.6 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.5 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.4 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.3 | |||
| Application | Cozmoslabs | Profile Builder | 2.8.2 |