CVE-2022-1801
High
Description
The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very easy for bots to bypass the captcha check, rendering the page a likely target for spam bots.
SeverityHigh
CVSS7.5
Exploit probability—
ProductVery Simple Contact Form
PublishedJun 20, 2022
First seenJun 20, 2022
Weakness typeCWE-804CWE-804
How to fix
Update
- very_simple_contact_form_project very_simple_contact_form11.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| very_simple_contact_form_project very_simple_contact_form | v < 11.6 | 11.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.