https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:26:00.105496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365720 EUVD-2026-365720 2026-10-06T14:26:00.406051+00:00 EUVD-2026-365720 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85117 fkie_cve-2026-85117 2026-10-06T14:26:00.406087+00:00

The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.

 https://cve.radiocsirt.org/vuln/ghsa-f9wj-4mrj-xggq GHSA-f9wj-4mrj-xggq 2026-10-06T14:26:00.406119+00:00

The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.