Skip to content
OpenAdvisories

Product · Cozmoslabs

Profile Builder Pro

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42385

    WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions.

    Cozmoslabs Profile Builder Pro
  • High 8.1
    CVE-2026-7647

    Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection

    The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due to the use of PHP's maybe_unserialize() function on the attacker-controlled 'args' POST parameter within the wppb_reques…

    Cozmoslabs Profile Builder Pro Web / CMS
  • High 8.8
    CVE-2024-22140

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0.

    Cozmoslabs Profile Builder Pro
  • High 7.1
    CVE-2024-22142

    WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile Builder Pro allows Reflected XSS.This issue affects Profile Builder Pro: from n/a through 3.10.0.

    Cozmoslabs Profile Builder Pro