Guessable CAPTCHA

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. Very Simple Contact Form < 11.6 - Captcha bypassCVE-2022-1801Very Simple Contact Form Project · 1.3% likely
2. atjiu pybbs Verification Code login CaptchaCVE-2025-8546atjiu · CVSS 5.3 · 0.5% likely

   Atjiu

3. Getwid – Gutenberg Blocks <= 2.0.4 - Captcha BypassCVE-2023-6963jetmonsters · CVSS 5.3 · 0.5% likely

   Jetmonsters

4. Appointment Hour Booking <= 1.3.72 - CAPTCHA BypassCVE-2022-4036codepeople · CVSS 5.3 · 0.5% likely

   Codepeople

5. WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerabilityCVE-2024-30540Guido · CVSS 5.3 · 0.5% likely
6. newbee-mall kaptcha mallKaptcha CaptchaCVE-2025-10423Newbee-Mall Project · CVSS 3.7 · 0.5% likely

   Newbee-Mall Project

7. WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilityCVE-2024-31295BestWebSoft · CVSS 5.3 · 0.4% likely

   Bestwebsoft

8. Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)CVE-2026-112067TYPO3 · CVSS 6.9 · 0.4% likely

   Typo3

9. Discuz! X5.0 CAPTCHA Bypass via Predictable Character SetCVE-2026-49953Discuz! · CVSS 6.5 · 0.4% likely

   Discuz

10. Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA BypassCVE-2025-1262webfactory · CVSS 5.3 · 0.3% likely

    WebFactory

11. If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for ar…CVE-2025-70129Pluxml · CVSS 5.3 · 0.3% likely

    Pluxml

12. NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTMLCVE-2026-111278nivocart · CVSS 5.3 · 0.3% likely

    Nivocart

13. DNN allows the possibility of bypassing CaptchaCVE-2025-32036dnnsoftware · CVSS 4.2 · 0.3% likely

    Dnnsoftware

14. HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed…CVE-2024-23567HCLSoftware · CVSS 4.3 · 0.3% likely

    HCLSoftware

15. An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an at…CVE-2025-50850Cs-Cart · CVSS 8.6 · 0.3% likely

    Cs-Cart

16. HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute force , automated at…CVE-2024-23566HCLSoftware · CVSS 6.5 · 0.3% likely

    HCLSoftware

17. Image CAPTCHA for Contact Form 7 and WPForms 3.3.29 CAPTCHA BypassCVE-2026-127206hookandhook · CVSS 5.3 · 0.2% likely

    Hookandhook

18. WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on FailureCVE-2026-40935WWBN · CVSS 5.3 · 0.2% likely

    WWBN

19. WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerabilityCVE-2026-27411jp-secure · CVSS 5.4 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.