<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: ph7software-ph7builder</title><description>Every new CVE for ph7software-ph7builder.</description><link>https://agentprime.io/</link><item><title>CVE-2026-108905: pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header</title><link>https://agentprime.io/advisories/CVE-2026-108905/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108905/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 14:58:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108904: pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController</title><link>https://agentprime.io/advisories/CVE-2026-108904/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108904/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 14:58:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108903: pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID</title><link>https://agentprime.io/advisories/CVE-2026-108903/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108903/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 14:58:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108902: pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link</title><link>https://agentprime.io/advisories/CVE-2026-108902/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108902/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 Oct 2026 14:58:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107638: pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php</title><link>https://agentprime.io/advisories/CVE-2026-107638/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107638/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 14:10:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107637: pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action</title><link>https://agentprime.io/advisories/CVE-2026-107637/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107637/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 14:10:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107636: pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController</title><link>https://agentprime.io/advisories/CVE-2026-107636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107636/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 14:10:34 GMT</pubDate><category>CVE</category></item></channel></rss>