WordPress Plugin Vulnerabilities
Cforms & CformsII <= 14.10.1 - CAPTCHA Bypass
Description
The cformsII plugin (slug: cforms) and its fork (slug: cforms2) have a CAPTCHA Bypass vulnerability. The MD5 hash for matching the answer is sent with the forms and so it can be overwritten. This is fixed in the fork (cforms2) with version 14.11 (see changelog for confirmation). The original delicious:days version (cforms) is left vulnerable.
Affects Plugins
No known fix 
Fixed in 14.11 References
Miscellaneous
Submitter
Bastian Germann
Verified
No
WPVDB ID
Timeline
Publicly Published
2010-12-15 (about 15 years ago)
Added
2017-03-20 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)
WPScan 