Ph7software - vulnerabilities (CVEs)

7 CVEs in 1 products, 7 in the last 30 days, newest from 2026-10-11.

Products

CVE-2026-108905 - CVSS 8.7 (high), 2026-10-11: pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass…
CVE-2026-108904 - CVSS 7.1 (high), 2026-10-11: pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data…
CVE-2026-108903 - CVSS 6.9 (medium), 2026-10-11: pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by…
CVE-2026-108902 - CVSS 8.1 (high), 2026-10-11: pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated…
CVE-2026-107638 - CVSS 7.6 (high), 2026-10-08: pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass…
CVE-2026-107637 - CVSS 5.3 (medium), 2026-10-08: pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in the note module delete() action that allows authenticated…
CVE-2026-107636 - CVSS 7.1 (high), 2026-10-08: pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any…