WP Plugin Contact Form 7 Permissions Privileges and Access Controls Vulnerability - CVE-2014-2265 - Vulnerability Database

WP Plugin Contact Form 7 Permissions Privileges and Access Controls Vulnerability - CVE-2014-2265

Medium

Reference: CVE-2014-2265

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-2265

Title: WP Plugin Contact Form 7 Permissions Privileges and Access Controls Vulnerability

Overview:

Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the _wpcf7_captcha_challenge_captcha-719 parameter.