Lucene search

WPScanCVE-2022-1801

HistoryJun 20, 2022 - 11:15 a.m.

CVE-2022-1801

2022-06-2011:15:09

CWE-804

CWE-287

WPScan

web.nvd.nist.gov

contact form

wordpress

plugin

vulnerability

cve-2022-1801

captcha

bypass

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

33.9%

JSON

The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very easy for bots to bypass the captcha check, rendering the page a likely target for spam bots.

Affected configurations

Nvd

Vulners

Node

very_simple_contact_form_projectvery_simple_contact_formRange<11.6wordpress

VendorProductVersionCPE
very_simple_contact_form_projectvery_simple_contact_form*cpe:2.3:a:very_simple_contact_form_project:very_simple_contact_form:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
very_simple_contact_form_project	very_simple_contact_form	*	cpe:2.3:a:very_simple_contact_form_project:very_simple_contact_form::::::wordpress::*

CNA Affected

[
  {
    "product": "Very Simple Contact Form",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "11.6",
        "status": "affected",
        "version": "11.6",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/a5c97809-2ffc-4efb-8c80-1b734361cd06

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

33.9%

JSON

Related for CVE-2022-1801