[ Vendor · 7 CVEs ]
ph7software
CVEs affecting ph7software published in the last 30 days, plus any ph7software CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108902 | 11 Oct 2026 | CVSS 8.1 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows… | |
| CVE-2026-108903 | 11 Oct 2026 | CVSS 5.3 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form… | |
| CVE-2026-108904 | 11 Oct 2026 | CVSS 6.5 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member… | |
| CVE-2026-108905 | 11 Oct 2026 | CVSS 7.5 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers… | |
| CVE-2026-107636 | 8 Oct 2026 | CVSS 6.5 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain… | |
| CVE-2026-107637 | 8 Oct 2026 | CVSS 4.3 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in the note module delete() action that allows… | |
| CVE-2026-107638 | 8 Oct 2026 | CVSS 6.8 | ph7software ph7builderpH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to… |