Advisories · Weakness
CWE-804.
Every Advisory and CVE whose sources give the weakness CWE-804, newest first.
- CVSS 6.9 Medium
TYPO3-EXT-SA-2026-030: Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)
- CWE-656
- CWE-804
>=4.0.0, <5.4.2 · fixed in 5.4.2
PKSA-rwzb-f3sr-qs44 · CVE-2026-112067 - CVSS 6.9 Medium
NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML
- nivocart
- CWE-804
- CVSS 6.5 Medium
HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have…
- HCLSoftware Aftermarket EPC
- CWE-804
- CVSS 4.3 Medium
HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which…
- HCLSoftware Aftermarket EPC
- CWE-804
- CVSS 5.3 Medium
GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets
- BURAK GD::SecurityImage
- Weak cryptography or TLS
- CWE-804
- CVSS 6.9 Medium
Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set
- Discuz! X5.0
- CWE-804
- CVSS 5.3 Medium
CAPTCHA Bypass in WWBN/AVideo via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure
- CWE-804
<=29.0 · no fixed version yet
GHSA-hg7g-56h5-5pqr · CVE-2026-40935 - CVSS 5.3 Medium
If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an…
- CWE-804
- CVSS 5.4 Medium
WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerability
- jp-secure SiteGuard WP Plugin
- CWE-804
- CVSS 6.3 Medium
newbee-mall kaptcha mallKaptcha Captcha
- newbee-mall
- Authentication bypass
- CWE-804
- CVSS 6.9 Medium
atjiu pybbs Verification Code login Captcha
- atjiu pybbs
- Authentication bypass
- CWE-804
- CVSS 8.6 High
An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting.
- Broken access control
- CWE-804
- CVSS 9.1 CriticalCritical · CVSS 9+
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text
- GRYPHON Mojolicious::Plugin::CaptchaPNG
- Weak cryptography or TLS
- CWE-804
- CVSS 4.2 Medium
DNN allows the possibility of bypassing Captcha
- dnnsoftware Dnn.Platform
- CWE-804
- CVSS 5.3 Medium
Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
- webfactory Advanced Google reCAPTCHA
- CWE-804
- CVSS 5.3 Medium
WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerability
- Guido VS Contact Form
- CWE-804
- CVSS 5.3 Medium
WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability
- Captcha by BestWebSoft
- CWE-804
- CVSS 5.3 Medium
Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
- jetmonsters Getwid – Gutenberg Blocks
- CWE-804
- CVSS 5.3 Medium
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
- codepeople Appointment Hour Booking – Booking Calendar
- CWE-804
-
Very Simple Contact Form < 11.6 - Captcha bypass
- Very Simple Contact Form
- CWE-804