Vendors / jotis Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now jotis records in CISA KEV No jotis vulnerabilities are listed in CISA KEV.
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jotis Blue Captcha blue-captcha allows Reflected XSS.This issue affects Blue Captcha: from n/a through <= 1.7.4.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00318 · Published 2025-03-26 · No fix listed CWE-79
Priority LOW 19
The Blue Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.0.1.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00192 · Published 2026-06-24 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 1 1 0 0
