Contact Form 7 Captcha

The CF7 Simple Recaptcha plugin can be used to protect multiple Contact Form 7 forms on the same page from spam and abuse. Users need to sign up for API keys for their site via Google's reCAPTCHA v2 - Checkbox. The plugin has been tested with Contact Form 7 version 5.6 and WordPress version 6.0 and can be configured from Settings. After configuration, users can add [cf7sr-simple-recaptcha] to any Contact Form 7 form. The latest update includes a CSRF check and escaped attributes in the Settings page, as well as a fix for potential Cross-Site Scripting in old web browsers.

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in Contact Form 7 Captcha 0.0.9

    Fixed

    The Contact Form 7 Captcha WordPress plugin had a security flaw that allowed someone with access to change the settings without any additional verification. This flaw also allowed malicious code to be...

    Read More
  • Input validation vulnerability in Contact Form 7 Captcha 0.1.1

    Fixed

    Read More