P
Vendor security profile
ph7software
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
7
CVE KEV
CVE severity distribution
7toplam CVE
High5 (71%)
Medium2 (29%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.7
CVE-2026-108905
pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
P
Patch verified
7.1
CVE-2026-108904
pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController
P
Patch verified
6.9
CVE-2026-108903
pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID
P
Patch verified
7.2
CVE-2026-108902
pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
P
Patch verified
7.6
CVE-2026-107638
pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php
P
Patch verifiedEPSS %0
5.3
CVE-2026-107637
pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action
P
Patch verifiedEPSS %0
7.1
CVE-2026-107636
pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController
P
Patch verifiedEPSS %0