The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very easy for bots to bypass the captcha check, rendering the page a likely target for spam bots.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/a5c97809-2ffc-4efb-8c80-1b734361cd06 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: WPScan
Published: 2022-06-20T10:25:59
Updated: 2022-06-20T10:25:58
Reserved: 2022-05-19T00:00:00
Link: CVE-2022-1801
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-06-20T11:15:09.683
Modified: 2023-07-24T13:29:54.223
Link: CVE-2022-1801
JSON object: View
Redhat Information
No data.