CVE-2021-36915: Cozmoslabs Profile Builder

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on.

Affected products

• Cozmoslabs Profile Builder: up to and including 3.6.0

Published 2022-10-11. Last modified 2026-06-17.