CWE-804

CVEs per yearBy the year they were published

1. 20222
2. 20243
3. 20256
4. 20269

Newest CVEs

• CVE-2026-112067

  Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)

  TYPO3 · Extension "Accessible Form Captcha"

  Medium6.9
• CVE-2026-111278

  NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML

  nivocart · nivocart

  Medium6.9
• CVE-2024-23566

  HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute…

  HCLSoftware · Aftermarket EPC

  Medium6.5
• CVE-2024-23567

  HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during…

  HCLSoftware · Aftermarket EPC

  Medium4.3
• CVE-2026-13082

  GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets

  BURAK · GD::SecurityImage

  Medium5.3
• CVE-2026-49953

  Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set

  Discuz! · Discuz! X5.0

  Medium6.9
• CVE-2026-40935

  WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure

  WWBN · AVideo

  Medium5.3
• CVE-2025-70129

  If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be…

  Product not named

  Medium5.3
• CVE-2026-27411

  WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerability

  jp-secure · SiteGuard WP Plugin

  Medium5.4
• CVE-2025-10423

  newbee-mall kaptcha mallKaptcha Captcha

  newbee-mall

  Medium6.3

Vendors it comes up for most

1. HCLSoftware2
2. BURAK1
3. BestWebSoft1
4. Discuz!1
5. GRYPHON1
6. Guido1
7. TYPO31
8. WWBN1
9. atjiu1
10. codepeople1