cozmoslabs vulnerabilities
- In CISA's KEV catalog
- 0 exploited vulnerabilities
- CVE records, last 3 years
- 81 since
Rank 200 of 467 vendors on this site - Critical or high
- 50.6% of 81 scored records; 0 not scored
Source: CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.
- cozmoslabs has 81 CVE records published between 12 Nov 2023 and 12 Nov 2026, ranking #200 of 467 vendors on this site by that count.
- Of the 81 with a CVSS score, 41 (50.6%) are rated critical or high; 0 (0% of all) have no CVSS score.
- None of the CVE records attributed to cozmoslabs is listed in CISA's KEV catalog as of 12 Nov 2026.
CVE records per year, by severity
- Critical
- High
- Medium, low or none
- Not scored
* 2026 is counted through .
Show data as a table
| Year | Records | Critical | High | Critical or high | Not scored |
|---|---|---|---|---|---|
| 2026* | 47 | 4 | 23 | 57.4% | 0% |
| 2025 | 17 | 3 | 5 | 47.1% | 0% |
| 2024 | 16 | 2 | 4 | 37.5% | 0% |
| 2023 | 3 | 1 | 0 | 33.3% | 0% |
| 2022 | 2 | 0 | 0 | 0% | 0% |
| 2021 | 0 | 0 | 0 | — | — |
| 2020 | 0 | 0 | 0 | — | — |
| 2019 | 0 | 0 | 0 | — | — |
| 2018 | 0 | 0 | 0 | — | — |
| 2017 | 0 | 0 | 0 | — | — |
"Critical or high" is the share of scored records; "Not scored" is the share of all records.
Source: CVE List, as of . About the data.
cozmoslabs vulnerabilities reported exploited, not in CISA KEV
Listed in VulnCheck KEV, which cites public reports of exploitation in the wild. CISA has not confirmed these in its own catalog. Most recently listed first.
- CVE-2026-109447 User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]
- CVE-2026-27413 WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability
- CVE-2026-75981 TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure
- CVE-2026-66582 WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability
Show 3 more
- CVE-2026-15826 User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter
- CVE-2022-0653 Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting
- CVE-2024-6695 profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation
Source: VulnCheck KEV, as of ; CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.
Highest exploit-prediction scores (EPSS)
EPSS estimates the probability that a vulnerability is exploited in the next 30 days. The highest-scoring cozmoslabs records today, from 1%.
Source: FIRST EPSS, as of ; CVE List, as of ; CISA KEV 2026.11.10, as of . About the data.