Contact Form With Captcha

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-42358 Nov 29, 19:15 HIGH This Week

The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the ~/cfwc-form.php file during contact form submission, which made it. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress CSRF Wordpress Plugin Contact Form With Captcha

NVD

CVSS 3.1

8.8

EPSS

0.6%

CVE-2021-42358

EPSS 1% CVSS 8.8

HIGH This Week

The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the ~/cfwc-form.php file during contact form submission, which made it. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress CSRF +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy