https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-13T19:04:54.442629+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-108903 CVE-2026-108903 — pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID 2026-10-13T19:04:54.443606+00:00

Affected: ph7software ph7builder

pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid(). Attackers can load a CAPTCHA-free form like login or search, then submit its ID with contact, comment, forum, invite or signup data to automate abuse.