CWE-804 · 13 kayıt
Guessable CAPTCHA
Bu sınıftaki CVE’ler
13 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2022-1801İstismar yok | Very Simple Contact Form < 11.6 - Captcha bypassvery simple contact form project · very simple contact form · CWE-804 | Yüksek7,5 | — | %1,2 | 20 Haz 2022 |
27İzleyin | CVE-2026-49953İstismar yok | Discuz! X5.0 CAPTCHA Bypass via Predictable Character Setdiscuz! · discuz! x5.0 · CWE-804 | Orta6,9 | — | %0,5 | 15 Haz 2026 |
26İzleyin | CVE-2025-32036İstismar yok | DNN allows the possibility of bypassing Captchadnnsoftware · dotnetnuke · CWE-804 | Orta6,5 | — | %0,3 | 8 Nis 2025 |
26İzleyin | CVE-2024-23566İstismar yok | HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented.hclsoftware · aftermarket epc · CWE-804 | Orta6,5 | — | %0,3 | 17 Tem 2026 |
21İzleyin | CVE-2023-6963İstismar yok | Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypassmotopress · getwid · CWE-804 | Orta5,3 | — | %0,5 | 5 Şub 2024 |
21İzleyin | CVE-2024-30540İstismar yok | WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerabilityguido · vs contact form · CWE-804 | Orta5,3 | — | %0,5 | 17 May 2024 |
21İzleyin | CVE-2022-4036İstismar yok | Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypassdwbooster · appointment hour booking · CWE-804 | Orta5,3 | — | %0,5 | 29 Kas 2022 |
21İzleyin | CVE-2024-31295İstismar yok | WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilitybestwebsoft · captcha by bestwebsoft · CWE-804 | Orta5,3 | — | %0,4 | 17 May 2024 |
21İzleyin | CVE-2025-1262İstismar yok | Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypasswebfactoryltd · advanced google recaptcha · CWE-804 | Orta5,3 | — | %0,3 | 25 Şub 2025 |
21İzleyin | CVE-2026-40935İstismar yok | WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failurewwbn · avideo · CWE-804 | Orta5,3 | — | %0,3 | 21 Nis 2026 |
21İzleyin | CVE-2025-70129İstismar yok | If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format thatpluxml · pluxml · CWE-804 | Orta5,3 | — | %0,3 | 10 Mar 2026 |
21İzleyin | CVE-2026-27411İstismar yok | WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerabilityjp-secure · siteguard wp plugin · CWE-804 | Orta5,4 | — | %0,3 | 5 Mar 2026 |
17İzleyin | CVE-2024-23567İstismar yok | HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parahclsoftware · aftermarket epc · CWE-804 | Orta4,3 | — | %0,3 | 17 Tem 2026 |
- CVE-2022-180130İzleyin
Very Simple Contact Form < 11.6 - Captcha bypass
YüksekCVSS 7,5İstismar yokEPSS %1very simple contact form project · very simple contact form20 Haz 2022
- CVE-2026-4995327İzleyin
Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set
OrtaCVSS 6,9İstismar yokEPSS %0discuz! · discuz! x5.015 Haz 2026
- CVE-2025-3203626İzleyin
DNN allows the possibility of bypassing Captcha
OrtaCVSS 6,5İstismar yokEPSS %0dnnsoftware · dotnetnuke8 Nis 2025
- CVE-2024-2356626İzleyin
HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented.
OrtaCVSS 6,5İstismar yokEPSS %0hclsoftware · aftermarket epc17 Tem 2026
- CVE-2023-696321İzleyin
Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
OrtaCVSS 5,3İstismar yokEPSS %1motopress · getwid5 Şub 2024
- CVE-2024-3054021İzleyin
WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0guido · vs contact form17 May 2024
- CVE-2022-403621İzleyin
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
OrtaCVSS 5,3İstismar yokEPSS %0dwbooster · appointment hour booking29 Kas 2022
- CVE-2024-3129521İzleyin
WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0bestwebsoft · captcha by bestwebsoft17 May 2024
- CVE-2025-126221İzleyin
Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
OrtaCVSS 5,3İstismar yokEPSS %0webfactoryltd · advanced google recaptcha25 Şub 2025
- CVE-2026-4093521İzleyin
WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure
OrtaCVSS 5,3İstismar yokEPSS %0wwbn · avideo21 Nis 2026
- CVE-2025-7012921İzleyin
If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that
OrtaCVSS 5,3İstismar yokEPSS %0pluxml · pluxml10 Mar 2026
- CVE-2026-2741121İzleyin
WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0jp-secure · siteguard wp plugin5 Mar 2026
- CVE-2024-2356717İzleyin
HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL para
OrtaCVSS 4,3İstismar yokEPSS %0hclsoftware · aftermarket epc17 Tem 2026