cleantalk
Vulnerabilities and Security Researches

cformsII, 99cfd0fdc87af45e51c8dbd6f23251765cb37267

Application

cformsII

Published on
Dec 15, 2010
Research Description
cformsII [cforms2] < 14.11 CformsII <= 14.10.1 - CAPTCHA Bypass The CformsII plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 14.10.1. This is due to the codes not being one-time use and improper verification of user-supplied data. This makes it possible for unauthenticated attackers to bypass the Captcha Verification.
Affected versions
max 14.11.
Status
vulnerable