# Cozmoslabs User Profile Builder vulnerabilities Source: https://junglewise.ai/threats/technologies/user-profile-builder Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/user-profile-builder.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 8 vulnerabilities in Cozmoslabs User Profile Builder: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-111948, was published on 21 October 2026. 4 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 4 - Last 90 days: 6 - All time: 8 (0 critical, 0 exploited in the wild) ## About Cozmoslabs User Profile Builder User Profile Builder is a WordPress plugin used for creating front-end registration, profile, and login forms. ## Latest Cozmoslabs User Profile Builder vulnerabilities - [CVE-2026-111948: User Profile Builder reflected XSS in admin page](https://junglewise.ai/threats/cve-2026-111948-the-user-profile-builder-wordpress-plugin-before-4-0-1-does-not) (info, published 21 Oct 2026) - [CVE-2026-109447: User Profile Builder privilege escalation via role parameter](https://junglewise.ai/threats/cve-2026-109447-the-user-profile-builder-beautiful-user-registration-forms-user) (high, CVSS 8.1, published 16 Oct 2026) - [CVE-2026-107748: User Profile Builder display_name stored XSS](https://junglewise.ai/threats/cve-2026-107748-the-user-profile-builder-beautiful-user-registration-forms-user) (medium, CVSS 6.4, published 16 Oct 2026) - [CVE-2026-100186: User Profile Builder stored cross-site scripting in first name field](https://junglewise.ai/threats/cve-2026-100186-the-user-profile-builder-beautiful-user-registration-forms-user) (high, CVSS 7.2, published 16 Oct 2026) - [CVE-2026-76548: User Profile Builder authentication bypass in file upload](https://junglewise.ai/threats/cve-2026-76548-user-profile-builder-authentication-bypass-in-file-upload) (high, CVSS 8.2, published 29 Aug 2026) - [CVE-2026-76546: User Profile Builder stored XSS in format date shortcode](https://junglewise.ai/threats/cve-2026-76546-user-profile-builder-stored-xss-in-format-date-shortcode) (medium, CVSS 6.8, published 29 Aug 2026) - [CVE-2026-15368: Cozmoslabs User Profile Builder account takeover via auto-login after registration](https://junglewise.ai/threats/cve-2026-15368-cozmoslabs-user-profile-builder-account-takeover-via-auto-login) (info, CVSS 8.1, published 1 Aug 2026) - [CVE-2026-3139: Cozmoslabs User Profile Builder IDOR in wppb_save_avatar_value](https://junglewise.ai/threats/cve-2026-3139-cozmoslabs-user-profile-builder-idor-in-wppb-save-avatar-value) (medium, CVSS 4.3, published 31 Mar 2026) ## Most severe Cozmoslabs User Profile Builder vulnerabilities - [CVE-2026-76548: User Profile Builder authentication bypass in file upload](https://junglewise.ai/threats/cve-2026-76548-user-profile-builder-authentication-bypass-in-file-upload) (high, CVSS 8.2, published 29 Aug 2026) - [CVE-2026-109447: User Profile Builder privilege escalation via role parameter](https://junglewise.ai/threats/cve-2026-109447-the-user-profile-builder-beautiful-user-registration-forms-user) (high, CVSS 8.1, published 16 Oct 2026) - [CVE-2026-100186: User Profile Builder stored cross-site scripting in first name field](https://junglewise.ai/threats/cve-2026-100186-the-user-profile-builder-beautiful-user-registration-forms-user) (high, CVSS 7.2, published 16 Oct 2026) - [CVE-2026-76546: User Profile Builder stored XSS in format date shortcode](https://junglewise.ai/threats/cve-2026-76546-user-profile-builder-stored-xss-in-format-date-shortcode) (medium, CVSS 6.8, published 29 Aug 2026) - [CVE-2026-107748: User Profile Builder display_name stored XSS](https://junglewise.ai/threats/cve-2026-107748-the-user-profile-builder-beautiful-user-registration-forms-user) (medium, CVSS 6.4, published 16 Oct 2026) - [CVE-2026-3139: Cozmoslabs User Profile Builder IDOR in wppb_save_avatar_value](https://junglewise.ai/threats/cve-2026-3139-cozmoslabs-user-profile-builder-idor-in-wppb-save-avatar-value) (medium, CVSS 4.3, published 31 Mar 2026) - [CVE-2026-15368: Cozmoslabs User Profile Builder account takeover via auto-login after registration](https://junglewise.ai/threats/cve-2026-15368-cozmoslabs-user-profile-builder-account-takeover-via-auto-login) (info, CVSS 8.1, published 1 Aug 2026) - [CVE-2026-111948: User Profile Builder reflected XSS in admin page](https://junglewise.ai/threats/cve-2026-111948-the-user-profile-builder-wordpress-plugin-before-4-0-1-does-not) (info, published 21 Oct 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 2 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 3 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Cozmoslabs technologies - [Cozmoslabs Profile Builder](https://junglewise.ai/threats/technologies/profile-builder): 14 vulnerabilities - [Cozmoslabs Paid Member Subscriptions](https://junglewise.ai/threats/technologies/paid-member-subscriptions): 11 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cozmoslabs User Profile Builder vulnerabilities", https://junglewise.ai/threats/technologies/user-profile-builder, 12 November 2026.