Contact Form 7 Captcha

WordPress plugin · contact-form-7-captcha · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Contact Form 7 Captcha on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 6.5	Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation CVE.org	>=0.1.7, <0.1.9	v0.1.9	CVE-2026-85117	Sep 9, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.