CVE-2021-42358

The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the /cfwc-form.php file during contact form submission, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.6.2...

PT-2021-23589

Name of the Vulnerable Software and Affected Versions Contact Form With Captcha WordPress plugin versions up to, and including 1.6.2 Description The issue is related to Cross-Site Request Forgery due to missing nonce validation in the /cfwc-form.php file during contact form submission. This allow...

CVE-2021-42358: Cross-Site Request Forgery (CSRF)

The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the /cfwc-form.php file during contact form submission, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.6.2...