Profile Builder CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Profile Builder CVE published 2026-10-23

CVE-2026-111965

The Profile Builder WordPress plugin, versions 4.0.0 to 4.0.4, contains a vulnerability that allows authenticated users to bypass reCAPTCHA verification on comment submission paths. This issue, reported by WPScan, enables attackers with Subscriber+ role to circumvent anti-spam protections configured for the WordPress comment form. WordPress administrators and security teams should assess their exposure, v [truncated]