CVE-2026-111965: Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass
Published Oct 23, 2026
·Updated
The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.
Affected Software
1 affected component
Cozmoslabs Profile Builder>=4.0.0<=4.0.4
Event History
Oct 23, 2026
CVE Published
via MITRE·10:44 AM
Data Sourced
via MITRE·10:44 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An authenticated WordPress user with Subscriber-level access or higher can exploit it. The issue affects comment submission paths where Profile Builder's configured reCAPTCHA verification is not enforced.
2
What is the practical impact?
An attacker can bypass the anti-spam reCAPTCHA protection for WordPress comments. The provided severity vector indicates low confidentiality impact and no stated integrity or availability impact.
3
Which plugin versions are affected?
Cozmoslabs Profile Builder versions 4.0.0 through 4.0.4 are affected.