Now officially on WordPress.org

CVE Database / CVE-2014-2265

CVE

CVE-2014-2265 — Contact Form 7 [contact-form-7] < 3.7.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2014-2265 Contact Form 7 [contact-form-7] < 3.7.2 — Unknown < 3.7.2 3.7.2 2014-02-26 —

CVE-2014-2265

Contact Form 7 versions prior to 3.7.2 contain a CAPTCHA bypass vulnerability where attackers can circumvent the CAPTCHA protection by simply not including the required challenge parameter in their form submissions, allowing them to send arbitrary form data without verification.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings