CVE-2026-108903

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

CVE-2026-108903 pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

CVE-2026-108903

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

CVE-2026-108903 pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

CVE-2026-108903

The pH7Builder (pH7 Social Dating CMS) software versions prior to 19.3.0 is vulnerable to a CAPTCHA bypass vulnerability. The root cause is the reliance on untrusted inputs, specifically allowing unauthenticated attackers to supply a client-chosen form ID to the PFBC Form::isValid() function. By ...

CVE-2026-108903 pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

EUVD-2026-97066

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...

PT-2026-110213

Name of the Vulnerable Software and Affected Versions pH7Builder versions prior to 19.3.0 Description An issue exists that allows unauthenticated attackers to bypass CAPTCHA validation. By providing a client-chosen form ID to the isValid function within the PFBC Form class, attackers can skip...

CVE-2026-108903: Reliance on Untrusted Inputs in a Security Decision

pH7Builder pH7 Social Dating CMS before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid. Attackers can load a CAPTCHA-free form like login or search, then submit its ID with...