CVE-2022-1801
Very Simple Contact Form < 11.6 - Captcha bypass
- State
- Published
- Severity
- Not scored
- Published
- Jun 20, 2022
- Updated
- Aug 3, 2024
- Reserved
- May 19, 2022
Description
The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very easy for bots to bypass the captcha check, rendering the page a likely target for spam bots.
Scores
The record has no CVSS score.
Weaknesses
- CWE-804 Guessable CAPTCHA
Affected Products
| Product | Versions |
|---|---|
Very Simple Contact FormUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.