Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

cozmoslabs — Vulnerabilities & Security Advisories 40

Browse all 40 CVE security advisories affecting cozmoslabs. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Cozmoslabs operates as a software development firm specializing in mobile applications and enterprise solutions, primarily targeting Android and iOS platforms. With forty recorded Common Vulnerabilities and Exposures (CVEs), the company’s product portfolio has historically exhibited significant security deficiencies. The most prevalent vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from inadequate input validation and improper access controls within their mobile frameworks. These issues frequently allow attackers to bypass authentication mechanisms or execute arbitrary commands on affected devices. While no single catastrophic data breach has been publicly attributed solely to Cozmoslabs, the high volume of CVEs indicates systemic weaknesses in their secure development lifecycle. The recurring nature of these vulnerabilities suggests a need for rigorous code auditing and enhanced security testing protocols to mitigate risks associated with their widely deployed software components.

Found 7 results / 40Clear Filters
Top products by cozmoslabs: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction Paid Member Subscriptions Profile Builder Pro Profile Builder TranslatePress WP Webhooks Profile Builder – User Profile & User Registration Forms (WordPress plugin) Profile Builder – User Profile & User Registration Forms User Profile Picture WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress
CVE IDTitleCVSSSeverityPublished
CVE-2025-11835 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-862 5.3 Medium2025-11-05
CVE-2024-12919 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-287 9.8 Critical2025-01-14
CVE-2024-11291 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-200 5.3 Medium2024-12-18
CVE-2024-10261 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-94 7.3 High2024-11-09
CVE-2024-9222 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-79 6.1 Medium2024-10-02
CVE-2024-1389 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-862 5.3 Medium2024-02-20
CVE-2024-1390 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-862 4.3 Medium2024-02-20

This page lists every published CVE security advisory associated with cozmoslabs. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.