CVE-2026-111965: CVE-2026-111965: güvenlik açığı

Açıklama (NVD)

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.

Özet bilgiler

CVSS v3.1

4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,26 (yüzdelik 18)

CWE

CWE-693

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wpscan.com
• CWE-693