Monthly
CAPTCHA bypass in the TYPO3 accessible_form_captcha extension allows automated clients to defeat the challenge by extracting the correct answer from the CAPTCHA image data, because the audio accessibility feature that embeds the answer is enabled by default. Any TYPO3 form that relies on this extension as its sole anti-automation control is exposed to bot-driven abuse; impact is limited to integrity of the CAPTCHA check (no data disclosure or service disruption), and no public exploit code was identified at time of analysis. The flaw is rated moderate severity (CVSS 3.1: 6.9, AV:N/AC:L/PR:N/UI:N with I:L only).
NivoCart through 2.5.1 emits the expected CAPTCHA answer directly into the HTML of protected public forms, so unauthenticated remote attackers can simply fetch the page, scrape the captcha_image value with a pattern match, and replay it to automate spam, fake registrations, bogus reviews, and account-deletion requests. Severity is moderate rather than critical: the independent assessment rates it CVSS 3.1 5.3 (AV:N/AC:L/PR:N/UI:N, integrity-only, no confidentiality or availability impact), consistent with the published CVSS 4.0 base score of 6.9, because the flaw yields no data disclosure, privilege gain, or code execution. No public exploit code, no CISA KEV listing, and no evidence of active exploitation were identified at time of analysis, and the real-world damage is bounded by the target's own handling of form submissions (e.g., mandatory email confirmation, review moderation).
CAPTCHA challenge controls in Discuz! X5.0 (releases 20260320-20260501) can be reliably defeated by unauthenticated remote attackers who harvest samples from exposed forum endpoints and train a custom optical character recognition model to predict challenge text. The underlying weakness - CWE-804 - stems from a limited, predictable character set and insufficient visual distortion in generated images, enabling automation of login, registration, and other abuse-protected flows. Critically, a publicly available exploit exists and KarmaInsecurity has documented chaining this bypass with a race condition to achieve full remote code execution, substantially elevating practical risk beyond the standalone CVSS 4.0 score of 6.9.
CAPTCHA bypass in WWBN AVideo 29.0 and prior enables unauthenticated attackers to defeat bot protection on user registration, password recovery, and contact form endpoints in at most 33 HTTP requests per session. Two cooperating flaws are responsible: the getCaptcha.php endpoint accepts the word-length parameter directly from the query string without bounds checking, allowing an attacker to force a 1-character CAPTCHA, and failed validation attempts do not invalidate the stored session token, enabling exhaustive brute-forcing of the 33-symbol alphabet. No CISA KEV listing exists, though SSVC rates the attack as automatable with POC-level exploitation, and the effective attack complexity is trivially low regardless of the AC:L CVSS rating.
If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an automated script is able to solve this anti-spam mechanism trivially and publish spam comments. [CVSS 5.3 MEDIUM]
The SiteGuard WP Plugin for WordPress through version 1.7.9 contains a guessable CAPTCHA implementation that allows attackers to bypass security protections without authentication. This vulnerability enables attackers to circumvent the plugin's functionality controls and potentially gain unauthorized access to protected resources or perform actions that should be restricted.
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required.
The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Guessable CAPTCHA vulnerability in BestWebSoft Captcha by BestWebSoft allows Functionality Bypass.2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Guessable CAPTCHA vulnerability in Guido VS Contact Form allows Functionality Bypass.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
CAPTCHA bypass in the TYPO3 accessible_form_captcha extension allows automated clients to defeat the challenge by extracting the correct answer from the CAPTCHA image data, because the audio accessibility feature that embeds the answer is enabled by default. Any TYPO3 form that relies on this extension as its sole anti-automation control is exposed to bot-driven abuse; impact is limited to integrity of the CAPTCHA check (no data disclosure or service disruption), and no public exploit code was identified at time of analysis. The flaw is rated moderate severity (CVSS 3.1: 6.9, AV:N/AC:L/PR:N/UI:N with I:L only).
NivoCart through 2.5.1 emits the expected CAPTCHA answer directly into the HTML of protected public forms, so unauthenticated remote attackers can simply fetch the page, scrape the captcha_image value with a pattern match, and replay it to automate spam, fake registrations, bogus reviews, and account-deletion requests. Severity is moderate rather than critical: the independent assessment rates it CVSS 3.1 5.3 (AV:N/AC:L/PR:N/UI:N, integrity-only, no confidentiality or availability impact), consistent with the published CVSS 4.0 base score of 6.9, because the flaw yields no data disclosure, privilege gain, or code execution. No public exploit code, no CISA KEV listing, and no evidence of active exploitation were identified at time of analysis, and the real-world damage is bounded by the target's own handling of form submissions (e.g., mandatory email confirmation, review moderation).
CAPTCHA challenge controls in Discuz! X5.0 (releases 20260320-20260501) can be reliably defeated by unauthenticated remote attackers who harvest samples from exposed forum endpoints and train a custom optical character recognition model to predict challenge text. The underlying weakness - CWE-804 - stems from a limited, predictable character set and insufficient visual distortion in generated images, enabling automation of login, registration, and other abuse-protected flows. Critically, a publicly available exploit exists and KarmaInsecurity has documented chaining this bypass with a race condition to achieve full remote code execution, substantially elevating practical risk beyond the standalone CVSS 4.0 score of 6.9.
CAPTCHA bypass in WWBN AVideo 29.0 and prior enables unauthenticated attackers to defeat bot protection on user registration, password recovery, and contact form endpoints in at most 33 HTTP requests per session. Two cooperating flaws are responsible: the getCaptcha.php endpoint accepts the word-length parameter directly from the query string without bounds checking, allowing an attacker to force a 1-character CAPTCHA, and failed validation attempts do not invalidate the stored session token, enabling exhaustive brute-forcing of the 33-symbol alphabet. No CISA KEV listing exists, though SSVC rates the attack as automatable with POC-level exploitation, and the effective attack complexity is trivially low regardless of the AC:L CVSS rating.
If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an automated script is able to solve this anti-spam mechanism trivially and publish spam comments. [CVSS 5.3 MEDIUM]
The SiteGuard WP Plugin for WordPress through version 1.7.9 contains a guessable CAPTCHA implementation that allows attackers to bypass security protections without authentication. This vulnerability enables attackers to circumvent the plugin's functionality controls and potentially gain unauthorized access to protected resources or perform actions that should be restricted.
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required.
The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Guessable CAPTCHA vulnerability in BestWebSoft Captcha by BestWebSoft allows Functionality Bypass.2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Guessable CAPTCHA vulnerability in Guido VS Contact Form allows Functionality Bypass.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.