Cozmoslabs
Cozmoslabs Security Releases - October 2026
cozmoslabs-2026-10 Oct 1, 2026 Source: Vendor
Cozmoslabs security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-100186
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
4 lines
Showing 1–4 of 4
CVE-2026-100186
BR2026-0000-033235
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
unclaimed
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions...
Credited as whale120
CVE-2026-107748
BR2026-0000-033243
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
unclaimed
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in ...
Credited as UKO
CVE-2026-109447
BR2026-0000-033247
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
unclaimed
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3...
Credited as Supakiad S. (m3ez)
CVE-2026-107768
BR2026-0000-034078
TranslatePress – Translate Multilingual sites with AI Translation
unclaimed
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and includ...
Credited as daroo