Vulnerabilidades en cozmoslabs
81 resultadosCVE-2025-2314MEDIUMUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2025-49292MEDIUMWordPress Profile Builder plugin <= 3.13.8 - Content Spoofing VulnerabilityEPSS 0.3%CVE-2026-61971LOWWordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-119167HIGHTranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack BypassEPSS 0.3%CVE-2025-4671MEDIUMProfile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare ShortcodesEPSS 0.3%CVE-2021-36915MEDIUMWordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2026-107768HIGHTranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED MarkersEPSS 0.3%CVE-2026-66701MEDIUMWordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-49870HIGHWordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-66074CRITICALWordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerabilityEPSS 0.3%CVE-2026-105317HIGHWordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-57348HIGHWordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2024-22140HIGHWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-95866HIGHUser Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar FieldEPSS 0.3%CVE-2023-47669MEDIUMWordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-66582HIGHWordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-120537HIGHTranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary EndpointEPSS 0.2%CVE-2026-100186HIGHUser Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name FieldEPSS 0.2%CVE-2026-54854MEDIUMWordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2025-11835MEDIUMPaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto RenewalEPSS 0.2%