TI-2025-07578 CVE-2025-8280 · GHSA-x2jm-xff2-34w4Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']Priority MEDIUM 59The Contact Form 7 reCAPTCHA WordPress plugin through 1.2.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web b…CVSS 3.1MEDIUM 5.8· Network · No auth · User interaction · EPSS 0.00202 · Published 2025-09-12 · No fix listed CWE-79
