Skip to content
Threat Feed
Subscribe

Vendor

Cozmoslabs

1 brief RSS
high advisory

Unrestricted File Upload in Cozmoslabs Profile Builder Plugin

An unauthenticated remote file upload vulnerability in the Cozmoslabs Profile Builder WordPress plugin (CVE-2026-82607) allows remote attackers to upload arbitrary files to the server via admin-ajax.php.

Profile Builder Plugin wordpress web-application rce file-upload
1r 1t 1c