Description
WordPress Plugin Contact Form 7 is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently predict next values of the content of CAPTCHA. WordPress Plugin Contact Form 7 version 4.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.1.1 or latest
References
Related Vulnerabilities
WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.8)
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.4.0)
WordPress Plugin Thank You Counter Button Multiple Cross-Site Scripting Vulnerabilities (1.8.7)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3557)
WordPress Plugin Asgaros Forum Multiple SQL Injection Vulnerabilities (1.15.12)