CVE-2022-1801CWE-804

Very Simple Contact Form < 11.6 - Captcha bypass

published June 20, 2022

CVSS
—
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very easy for bots to bypass the captcha check, rendering the page a likely target for spam bots.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01240 · 68.9th percentile
Weakness
CWE-804 · Guessable CAPTCHA
Published
2022-06-20T10:25Z
EPSS history
Timeline
  • 20 JUN 10:25Z
    Very Simple Contact Form < 11.6 - Captcha bypass
    cvelistv5