Vsourz Cf7 Invisible Recaptcha — known CVE vulnerabilities

Every CVE whose affected-product data names Vsourz Cf7 Invisible Recaptcha, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-21012 — CVSS 6.1 (medium): The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
• CVE-2023-28167 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital CF7 Invisible reCAPTCHA plugin <= 1.3.3 versions.