Read the docs

Contact Form 7 Captcha Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Contact Form 7 Captcha Project records in CISA KEV

No Contact Form 7 Captcha Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form 7 Captcha 2 records LOW

Records

2 records in Contact Form 7 Captcha · all components

TI-2021-06850 CVE-2021-24565 · GHSA-j7hp-47c4-p8rw

Contact Form 7 Captcha < 0.0.9 - CSRF to Stored XSS

Priority LOW 39

The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00719 Published 2021-08-23 Fixed in 0.0.9 CWE-352
TI-2022-02024 CVE-2022-2187 · GHSA-q9cc-mh38-x933

Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting

Priority LOW 30

The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web brow…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01486 Published 2022-07-17 Fixed in 0.1.2 CWE-79
Open these records in search →