PH
Vendor
ph7software
7
CVEs
0
On KEV
7
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108905 | PH ph7builder ph7software | 7.5 | Oct 11 | pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header |
| CVE-2026-108904 | PH ph7builder ph7software | 6.5 | Oct 11 | pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController |
| CVE-2026-108903 | PH ph7builder ph7software | 5.3 | Oct 11 | pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID |
| CVE-2026-108902 | PH ph7builder ph7software | 8.1 | Oct 11 | pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link |
| CVE-2026-107638 | PH ph7builder ph7software | 6.8 | Oct 8 | pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php |
| CVE-2026-107637 | PH ph7builder ph7software | 4.3 | Oct 8 | pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action |
| CVE-2026-107636 | PH ph7builder ph7software | 6.5 | Oct 8 | pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController |