4.3
Moyenne
CVE-2026-111965 The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment…
Description
The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Profile Builder 4.0 | 4.0.0 → < 4.0.5 | 4.0.5 |