Vulnerabilidades en cozmoslabs
81 resultadosCVE-2026-42385HIGHWordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-119523MEDIUMWordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-54853MEDIUMWordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-54855HIGHWordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-121765HIGHWordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2023-51522MEDIUMWordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-31341MEDIUMWordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2025-8896MEDIUMUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-31088MEDIUMWordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-115807HIGHUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' AttributeEPSS 0.2%CVE-2026-112842MEDIUMWordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-96338MEDIUMWordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-32728MEDIUMWordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-13054MEDIUMUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2026-93656MEDIUMUser Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar FieldEPSS 0.2%CVE-2026-107748MEDIUMUser Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' ParameterEPSS 0.2%CVE-2026-97249MEDIUMWordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2026-39514HIGHWordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-3139MEDIUMUser Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar FieldEPSS 0.2%CVE-2026-103062HIGHWordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%