WordPress plugin
CF7 Invisible reCAPTCHA security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All CF7 Invisible reCAPTCHA vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery via vsz_cf7_invisible_recaptcha_page ≤1.3.3Update to 1.3.4 | CVE-2023-28167 | |
| Medium6.1 | Cross-Site Scripting <1.3.2Update to 1.3.2 | CVE-2018-21012 |
- Medium4.3Cross-Site Request Forgery via vsz_cf7_invisible_recaptcha_page
≤1.3.3Update to 1.3.4
- Medium6.1Cross-Site Scripting
<1.3.2Update to 1.3.2
CF7 Invisible reCAPTCHA: common questions
Does CF7 Invisible reCAPTCHA have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in CF7 Invisible reCAPTCHA: 2 medium. None are known to affect version null.
How do I check which version of CF7 Invisible reCAPTCHA I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CF7 Invisible reCAPTCHA vulnerability?
CVE-2023-28167, published Mar 14, 2023: CF7 Invisible reCAPTCHA <= 1.3.3 - Cross-Site Request Forgery via vsz_cf7_invisible_recaptcha_page. Severity: Medium (CVSS 4.3).
Is any CF7 Invisible reCAPTCHA vulnerability listed in CISA KEV?
No. None of the known CF7 Invisible reCAPTCHA vulnerabilities is currently listed in the CISA KEV catalog.