cozmoslabs
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 70 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 6, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute
Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass
Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute
Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change
WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability
WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability
Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions
User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field
User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]
User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
Monitor cozmoslabs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.