Skip to content
Sign in
4.3 Medium

CVE-2026-111965 The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment…

Description

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.

Affected products and versions

Product Affected versions Fixed in
Profile Builder 4.0 4.0.0 → < 4.0.5 4.0.5

Other CVEs of Profile Builder

The 2 CVEs of Profile Builder →
CVE-2023-4059 The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which… 4.3 Medium
Track this CVE