Sploitus

4 exploited vulnerabilities in User Profile Builder

Vulnerabilities with publicly known exploits

Vendors
WordPress
With known exploits
4
Affected Cozmoslabs Profile Builder versions
< 3.11.8, 3.12.2

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2025-15030 1 exploit
CVSS 9.8 CRITICAL 2026-02-02FIX AVAILABLE
CVE-2024-6366 1 exploit
CVSS 9.1 CRITICAL 2024-07-29FIX AVAILABLE
CVE-2026-15368
CVSS 8.1 HIGH 2026-08-01FIX AVAILABLE
CVE-2024-6708
CVSS 4.8 MEDIUM 2025-05-15FIX AVAILABLE