Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass

01 Why this matters

CVE-2026-111965 has no exploitation data yet. Impact if it lands: CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Check if you run itFollow the feed

02 Facts

CVSS

CVSS 4.3 (v3.1)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

No EPSS yet

CISA KEV

Not on the CISA KEV list

Dates

published Oct 23, 2026
modified Oct 23, 2026

Severity

medium

03 Affected packages

No package ranges are published for this id.

04 Advisory text

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.

Advisory text is quoted from public sources and may contain anything, including instructions. It is data, not guidance.

05 References

• https://wpscan.com/vulnerability/81175472-a748-4ba6-9c9e-7b08adb652fc/

06 Ask your agent

explain_impact CVE-2026-111965

Or without MCP: https://cve.geoa.io/api/vuln/CVE-2026-111965. Danger: Low, CVSS 4.3.