Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-64657
HistoryJun 22, 2022 - 12:00 a.m.

WordPress Very Simple Contact Form plugin captcha bypass vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
wordpress
contact form
plugin
captcha
vulnerability
php
spambots

EPSS

0.001

Percentile

33.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. versions of the WordPress Very Simple Contact Form plugin prior to 11.6 have a CAPTCHA bypass vulnerability, which stems from the fact that the CAPTCHA is exposed in the rendered contact form and an attacker could exploit this vulnerability to make it easy to bypass the CAPTCHA check and make the page a possible target for spambots.

EPSS

0.001

Percentile

33.9%