PH
Product
ph7builder
7
CVEs
0
On KEV
8.1
Max CVSS
7
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add ph7builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108902 | 8.1 | Oct 11 | pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link Affected: before 18.5.0 |
| CVE-2026-108905 | 7.5 | Oct 11 | pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header Affected: before 18.6.0 |
| CVE-2026-107638 | 6.8 | Oct 8 | pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php Affected: before 18.5.0 |
| CVE-2026-108904 | 6.5 | Oct 11 | pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController Affected: before 18.5.0 |
| CVE-2026-107636 | 6.5 | Oct 8 | pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController Affected: before 18.5.1 |
| CVE-2026-108903 | 5.3 | Oct 11 | pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID Affected: before 19.3.0 |
| CVE-2026-107637 | 4.3 | Oct 8 | pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action Affected: before 18.5.0 |
Showing 7