https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-13T23:18:27.549203+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-108903 fkie_cve-2026-108903 2026-10-13T23:18:27.582743+00:00

pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid(). Attackers can load a CAPTCHA-free form like login or search, then submit its ID with contact, comment, forum, invite or signup data to automate abuse.

 https://db.gcve.eu/vuln/ghsa-q5mq-9wc6-h8x8 GHSA-q5mq-9wc6-h8x8 2026-10-13T23:18:27.582863+00:00

pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid(). Attackers can load a CAPTCHA-free form like login or search, then submit its ID with contact, comment, forum, invite or signup data to automate abuse.