CWE-804: Guessable CAPTCHA
The product uses a CAPTCHA challenge, but the challenge can be guessed or automatically recognized by a non-human actor.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- typo3 extension "accessible form captcha" Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha) 6.9 Medium
- nivocart NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML 6.9 Medium
- hcl software aftermarket epc HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha... 6.5 Medium
- hcl software aftermarket epc HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows... 4.3 Medium
- burak gd::securityimage GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets 5.3 Medium
- discuz! x5.0 Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set 6.9 Medium
- wwbn avideo WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure 5.3 Medium
- pluxml If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a... 5.3 Medium
- jp-secure siteguard wp plugin WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerability 5.4 Medium
- newbee-ltd newbee-mall newbee-mall kaptcha mallKaptcha Captcha 6.3 Medium
- atjiu pybbs atjiu pybbs Verification Code login Captcha 6.9 Medium
- cs-cart An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential... 8.6 High
- gryphon mojolicious::plugin::captchapng Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text 9.1 Critical
- dnnsoftware dotnetnuke, dnn.platform +1 more DNN allows the possibility of bypassing Captcha 4.2 Medium
- webfactory advanced google recaptcha Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass 5.3 Medium
- guido vs contact form WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerability 5.3 Medium
- bestwebsoft captcha by bestwebsoft WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability 5.3 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass 5.3 Medium
- answer, answerdev answerdev/answer +1 more Improper Restriction of Excessive Authentication Attempts in answerdev/answer 5.3 Medium
- dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 more Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass 5.3 Medium
- unknown very simple contact form, very simple contact form project simple contact form +1 more Very Simple Contact Form < 11.6 - Captcha bypass 7.5 High