CVE-2026-37603

The pH7Software pH7Builder (pH7 Social Dating CMS) , versions through 19.2.0 , is vulnerable to an Improper Restriction of Excessive Authentication Attempts in its administration login. The root cause is that the CAPTCHA escalation flag (captcha_admin_enabled) is stored in the PHP session . Becau...

EUVD-2026-84811

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder pH7 Social Dating CMS through 19.2.0. The CAPTCHA escalation flag is stored in the PHP session as captchaadminenabled and the CAPTCHA form element is only built when that flag is presen...