https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:22:10.139626+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-85117 CVE-2026-85117 — Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation 2026-10-08T05:22:10.156962+00:00

Affected: Unknown Contact Form 7 Captcha

The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.