Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cozmoslabs — Vulnerabilities & Security Advisories 54

Browse all 54 CVE security advisories affecting Cozmoslabs. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cozmoslabs operates as a software development firm specializing in mobile applications and enterprise solutions, primarily targeting Android and iOS platforms. With forty recorded Common Vulnerabilities and Exposures (CVEs), the company’s product portfolio has historically exhibited significant security deficiencies. The most prevalent vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from inadequate input validation and improper access controls within their mobile frameworks. These issues frequently allow attackers to bypass authentication mechanisms or execute arbitrary commands on affected devices. While no single catastrophic data breach has been publicly attributed solely to Cozmoslabs, the high volume of CVEs indicates systemic weaknesses in their secure development lifecycle. The recurring nature of these vulnerabilities suggests a need for rigorous code auditing and enhanced security testing protocols to mitigate risks associated with their widely deployed software components.

CVE ID Title CVSS Severity Published
CVE-2025-2314 User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor CWE-79 6.4 Medium 2025-04-16
CVE-2025-31088 WordPress Paid Member Subscriptions plugin <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability — Paid Member Subscriptions CWE-79 6.5 Medium 2025-03-28
CVE-2025-30773 WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability — TranslatePress CWE-502 7.2 High 2025-03-27
CVE-2024-12919 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-287 9.8 Critical 2025-01-14
CVE-2024-12738 User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor CWE-79 6.1 Medium 2025-01-07
CVE-2024-11291 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-200 5.3 Medium 2024-12-18
CVE-2024-10261 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-94 7.3 High 2024-11-09
CVE-2024-9222 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-79 6.1 Medium 2024-10-02
CVE-2024-5639 User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update — User Profile Picture CWE-639 4.3 Medium 2024-06-21
CVE-2024-31341 WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability — Profile Builder CWE-345 5.3 Medium 2024-05-17
CVE-2024-32728 WordPress Paid Membership Subscriptions plugin <= 2.11.0 - Cross Site Request Forgery (CSRF) vulnerability — Paid Member Subscriptions CWE-352 4.3 Medium 2024-04-24
CVE-2023-51522 WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability — Paid Member Subscriptions CWE-352 4.3 Medium 2024-03-15
CVE-2024-1389 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-862 5.3 Medium 2024-02-20
CVE-2024-1390 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-862 4.3 Medium 2024-02-20
CVE-2024-0324 User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor CWE-284 8.2 High 2024-02-05
CVE-2024-22140 WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF) — Profile Builder Pro CWE-352 8.8 High 2024-01-31
CVE-2024-22141 WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure — Profile Builder Pro CWE-200 6.5 Medium 2024-01-24
CVE-2024-22142 WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS) — Profile Builder Pro CWE-79 7.1 High 2024-01-12
CVE-2023-6504 Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor CWE-639 4.3 Medium 2024-01-11
CVE-2023-47669 WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF) — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor CWE-352 5.4 Medium 2023-11-13
CVE-2023-2297 Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor CWE-620 9.8 Critical 2023-04-26
CVE-2023-0814 Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor CWE-200 6.5 Medium 2023-02-14
CVE-2021-36915 WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability — Profile Builder – User Profile & User Registration Forms (WordPress plugin) CWE-352 4.2 Medium 2022-10-11
CVE-2022-0653 Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting — Profile Builder – User Profile & User Registration Forms CWE-79 6.1 Medium 2022-02-24

This page lists every published CVE security advisory associated with Cozmoslabs. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.