What’s Vulnerable › Products

ph7software ph7builder vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ph7software ph7builder version is affected

Latest ph7software ph7builder vulnerabilities

• CVE-2026-108905 — pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header (CVSS 7.5)
• CVE-2026-108904 — pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController (CVSS 6.5)
• CVE-2026-108903 — pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID (CVSS 5.3)
• CVE-2026-108902 — pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link (CVSS 8.1)
• CVE-2026-107638 — pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php (CVSS 6.8)
• CVE-2026-107637 — pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action (CVSS 4.3)
• CVE-2026-107636 — pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController (CVSS 6.5)