Read the docs

Contact Form With Captcha Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Contact Form With Captcha Project records in CISA KEV

No Contact Form With Captcha Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form With Captcha 1 record MEDIUM

Records

1 record in Contact Form With Captcha · all components

TI-2021-18774 CVE-2021-42358 · GHSA-3286-68f5-pqwv

Contact Form With Captcha <= 1.6.2 Cross-Site Request Forgery to Reflected Cross-Site Scripting

Priority MEDIUM 41

The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the ~/cfwc-form.php file during contact form submission, which made it possible for attackers…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00625 Published 2021-11-29 No fix listed CWE-352
Open these records in search →