Product

Profile Builder Plugin (<= 3.16.1)

1 brief RSS

Unrestricted File Upload in Cozmoslabs Profile Builder Plugin

An unauthenticated remote file upload vulnerability in the Cozmoslabs Profile Builder WordPress plugin (CVE-2026-82607) allows remote attackers to upload arbitrary files to the server via admin-ajax.php.

Profile Builder Plugin wordpress web-application rce file-upload

1r 1t 1c 6m ago