1. Home
  2. CVE Database
  3. CVE-2022-1801
HIGH · 7.5

CVE-2022-1801

The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very ea...

Vulnerability Description

The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very easy for bots to bypass the captcha check, rendering the page a likely target for spam bots.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
Very Simple Contact Form ProjectVery Simple Contact Form< 11.6

Related Weaknesses (CWE)

CWE-287CWE-804

References

FAQ

What is CVE-2022-1801?

CVE-2022-1801 is a vulnerability with a CVSS score of 7.5 (HIGH). The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very ea...

How severe is CVE-2022-1801?

CVE-2022-1801 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1801?

Check the references section above for vendor advisories and patch information. Affected products include: Very Simple Contact Form Project Very Simple Contact Form.