Contact Form 7 Captcha (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-09. Vendor: Unknown.

CVEs of Contact Form 7 Captcha

• CVE-2026-85117 - CVSS 6.5 (medium), 2026-09-09: The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor…
• CVE-2022-2187 - CVSS 6.1 (medium), 2022-07-17: The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute,…
• CVE-2021-24565 - CVSS 8.8 (high), 2021-08-23: The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in…