Skip to content
OpenAdvisories

Vendor

Cozmoslabs

83 known vulnerabilities.

Products

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 21 Paid Member Subscriptions 15 Profile Builder 10 TranslatePress – Translate Multilingual sites with AI Translation 10 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction 7 TranslatePress 6 Profile Builder Pro 6 User Profile Picture 2 WP Webhooks 2 WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress 1 Profile Builder – User Profile & User Registration Forms (WordPress plugin) 1 Profile Builder Plugin 1 Profile Builder – User Profile & User Registration Forms 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2026-61971

    WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through <= 2.6…

    Cozmoslabs User Profile Picture