CWE-804 · 14 records
Guessable CAPTCHA
CVEs in this class
14 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2022-1801No exploit | Very Simple Contact Form < 11.6 - Captcha bypassvery simple contact form project · very simple contact form · CWE-804 | High7.5 | — | 1.2% | Jun 20, 2022 |
27Monitor | CVE-2026-49953No exploit | Discuz! X5.0 CAPTCHA Bypass via Predictable Character Setdiscuz! · discuz! x5.0 · CWE-804 | Medium6.9 | — | 0.4% | Jun 15, 2026 |
27Monitor | CVE-2026-111278No exploit | NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTMLnivocart · nivocart · CWE-804 | Medium6.9 | — | 0.3% | Oct 15, 2026 |
26Monitor | CVE-2025-32036No exploit | DNN allows the possibility of bypassing Captchadnnsoftware · dotnetnuke · CWE-804 | Medium6.5 | — | 0.3% | Apr 8, 2025 |
26Monitor | CVE-2024-23566No exploit | HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented.hclsoftware · aftermarket epc · CWE-804 | Medium6.5 | — | 0.2% | Jul 17, 2026 |
21Monitor | CVE-2023-6963No exploit | Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypassmotopress · getwid · CWE-804 | Medium5.3 | — | 0.5% | Feb 5, 2024 |
21Monitor | CVE-2024-30540No exploit | WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerabilityguido · vs contact form · CWE-804 | Medium5.3 | — | 0.4% | May 17, 2024 |
21Monitor | CVE-2022-4036No exploit | Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypassdwbooster · appointment hour booking · CWE-804 | Medium5.3 | — | 0.4% | Nov 29, 2022 |
21Monitor | CVE-2024-31295No exploit | WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilitybestwebsoft · captcha by bestwebsoft · CWE-804 | Medium5.3 | — | 0.3% | May 17, 2024 |
21Monitor | CVE-2025-1262No exploit | Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypasswebfactoryltd · advanced google recaptcha · CWE-804 | Medium5.3 | — | 0.3% | Feb 25, 2025 |
21Monitor | CVE-2026-40935No exploit | WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failurewwbn · avideo · CWE-804 | Medium5.3 | — | 0.3% | Apr 21, 2026 |
21Monitor | CVE-2025-70129No exploit | If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format thatpluxml · pluxml · CWE-804 | Medium5.3 | — | 0.2% | Mar 10, 2026 |
21Monitor | CVE-2026-27411No exploit | WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerabilityjp-secure · siteguard wp plugin · CWE-804 | Medium5.4 | — | 0.2% | Mar 5, 2026 |
17Monitor | CVE-2024-23567No exploit | HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parahclsoftware · aftermarket epc · CWE-804 | Medium4.3 | — | 0.3% | Jul 17, 2026 |
- CVE-2022-180130Monitor
Very Simple Contact Form < 11.6 - Captcha bypass
HighCVSS 7.5No exploitEPSS 1%very simple contact form project · very simple contact formJun 20, 2022
- CVE-2026-4995327Monitor
Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set
MediumCVSS 6.9No exploitEPSS 0%discuz! · discuz! x5.0Jun 15, 2026
- CVE-2026-11127827Monitor
NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML
MediumCVSS 6.9No exploitEPSS 0%nivocart · nivocartOct 15, 2026
- CVE-2025-3203626Monitor
DNN allows the possibility of bypassing Captcha
MediumCVSS 6.5No exploitEPSS 0%dnnsoftware · dotnetnukeApr 8, 2025
- CVE-2024-2356626Monitor
HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented.
MediumCVSS 6.5No exploitEPSS 0%hclsoftware · aftermarket epcJul 17, 2026
- CVE-2023-696321Monitor
Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
MediumCVSS 5.3No exploitEPSS 0%motopress · getwidFeb 5, 2024
- CVE-2024-3054021Monitor
WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerability
MediumCVSS 5.3No exploitEPSS 0%guido · vs contact formMay 17, 2024
- CVE-2022-403621Monitor
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
MediumCVSS 5.3No exploitEPSS 0%dwbooster · appointment hour bookingNov 29, 2022
- CVE-2024-3129521Monitor
WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability
MediumCVSS 5.3No exploitEPSS 0%bestwebsoft · captcha by bestwebsoftMay 17, 2024
- CVE-2025-126221Monitor
Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
MediumCVSS 5.3No exploitEPSS 0%webfactoryltd · advanced google recaptchaFeb 25, 2025
- CVE-2026-4093521Monitor
WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure
MediumCVSS 5.3No exploitEPSS 0%wwbn · avideoApr 21, 2026
- CVE-2025-7012921Monitor
If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that
MediumCVSS 5.3No exploitEPSS 0%pluxml · pluxmlMar 10, 2026
- CVE-2026-2741121Monitor
WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerability
MediumCVSS 5.4No exploitEPSS 0%jp-secure · siteguard wp pluginMar 5, 2026
- CVE-2024-2356717Monitor
HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL para
MediumCVSS 4.3No exploitEPSS 0%hclsoftware · aftermarket epcJul 17, 2026