← CVE Intelligence

CVE-2026-111965

Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass PUBLISHED

Description (CNA)

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.

Affected (CNA)

Vendor / product	Versions
Unknown / Profile Builder	affected 4.0.0 before 4.0.5

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/81175472-a748-4ba6-9c9e-7b08adb652fc/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.