VS Contact Form <= 14.0 is vulnerable to Sum Captcha Bypass vulnerability

Unauthenticated

Published
2023-09-04

The VS Contact Form plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 13.9. Exact implications of this vulnerability are unknown.

CVE

https://www.cve.org/CVERecord?id=CVE-2023-41862

CVSS

Score:5.3

Severity:Medium

Version: 14.0

There is a patch available in v14.1 and we strongly recommend you update to this version as soon as possible.