Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Contact Form 7 Captcha Project Clear all filters
TI-2022-02024 CVE-2022-2187 · GHSA-q9cc-mh38-x933

Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting

Priority LOW 30

The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web brow…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01486 Published 2022-07-17 Fixed in 0.1.2 CWE-79
TI-2021-06850 CVE-2021-24565 · GHSA-j7hp-47c4-p8rw

Contact Form 7 Captcha < 0.0.9 - CSRF to Stored XSS

Priority LOW 39

The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00719 Published 2021-08-23 Fixed in 0.0.9 CWE-352