Skip to content
OpenAdvisories

Vendor

Cozmoslabs

83 known vulnerabilities.

Products

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 21 Paid Member Subscriptions 15 Profile Builder 10 TranslatePress – Translate Multilingual sites with AI Translation 10 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 7 TranslatePress 6 Profile Builder Pro 6 User Profile Picture 2 WP Webhooks 2 WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress 1 Profile Builder – User Profile & User Registration Forms (WordPress plugin) 1 Profile Builder Plugin 1 Profile Builder – User Profile & User Registration Forms 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-19632 Public exploit Scanner template

    TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

    The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trp_get_translations_regular' AJAX action. This makes it possible f…

    Cozmoslabs TranslatePress – Translate Multilingual sites with AI Translation Web / CMS
  • Critical 9.8
    CVE-2026-15826 Public exploit Scanner template

    User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

    The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user() before pe…

    Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor Web / CMS