CWE-804 · Access Control
Guessable CAPTCHA
19CVEs
SortMost likely exploited
19 CVEs with CWE-804 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-1801Very Simple Contact Form < 11.6 - Captcha bypassVery Simple Contact Form Project · Very Simple Contact Form · 2022-06-20 | – | 1.3% | 2022-06-20 |
| CVE-2025-8546atjiu pybbs Verification Code login Captchaatjiu · pybbs · CVSS 5.3 · 2025-08-05 | 5.3 | 0.5% | 2025-08-05 |
| CVE-2023-6963Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypassjetmonsters · Getwid – Gutenberg Blocks · CVSS 5.3 · 2024-02-05 | 5.3 | 0.5% | 2024-02-05 |
| CVE-2022-4036Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypasscodepeople · Appointment Hour Booking – Booking Calendar · CVSS 5.3 · 2022-11-29 | 5.3 | 0.5% | 2022-11-29 |
| CVE-2024-30540WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerabilityGuido · VS Contact Form · CVSS 5.3 · 2024-05-17 | 5.3 | 0.5% | 2024-05-17 |
| CVE-2025-10423newbee-mall kaptcha mallKaptcha CaptchaNewbee-Mall Project · newbee-mall · CVSS 3.7 · 2025-09-15 | 3.7 | 0.5% | 2025-09-15 |
| CVE-2024-31295WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilityBestWebSoft · Captcha by BestWebSoft · CVSS 5.3 · 2024-05-17 | 5.3 | 0.4% | 2024-05-17 |
| CVE-2026-112067Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)TYPO3 · Extension "Accessible Form Captcha" · CVSS 6.9 · 2026-10-20 | 6.9 | 0.4% | 2026-10-20 |
| CVE-2026-49953Discuz! X5.0 CAPTCHA Bypass via Predictable Character SetDiscuz! · Discuz! X5.0 · CVSS 6.5 · 2026-06-15 | 6.5 | 0.4% | 2026-06-15 |
| CVE-2025-1262Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypasswebfactory · Advanced Google reCAPTCHA · CVSS 5.3 · 2025-02-25 | 5.3 | 0.3% | 2025-02-25 |
| CVE-2025-70129If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for ar…Pluxml · Pluxml · CVSS 5.3 · 2026-03-10 | 5.3 | 0.3% | 2026-03-10 |
| CVE-2026-111278NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTMLnivocart · nivocart · CVSS 5.3 · 2026-10-15 | 5.3 | 0.3% | 2026-10-15 |
| CVE-2025-32036DNN allows the possibility of bypassing Captchadnnsoftware · Dnn.Platform · CVSS 4.2 · 2025-04-08 | 4.2 | 0.3% | 2025-04-08 |
| CVE-2024-23567HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed…HCLSoftware · Aftermarket EPC · CVSS 4.3 · 2026-07-17 | 4.3 | 0.3% | 2026-07-17 |
| CVE-2025-50850An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an at…Cs-Cart · Cs-Cart · CVSS 8.6 · 2025-07-31 | 8.6 | 0.3% | 2025-07-31 |
| CVE-2024-23566HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute force , automated at…HCLSoftware · Aftermarket EPC · CVSS 6.5 · 2026-07-17 | 6.5 | 0.3% | 2026-07-17 |
| CVE-2026-127206Image CAPTCHA for Contact Form 7 and WPForms 3.3.29 CAPTCHA Bypasshookandhook · Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) · CVSS 5.3 · 2026-11-12 | 5.3 | 0.2% | 2026-11-12 |
| CVE-2026-40935WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on FailureWWBN · AVideo · CVSS 5.3 · 2026-04-21 | 5.3 | 0.2% | 2026-04-21 |
| CVE-2026-27411WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerabilityjp-secure · SiteGuard WP Plugin · CVSS 5.4 · 2026-03-05 | 5.4 | 0.2% | 2026-03-05 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.