VulnerabilityModified
CVE-2008-7216
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the…
MEDIUM 4.3EPSS 5.85%
Does this matter?
Lower severity and a low EPSS score (5.85%). Track it; it rarely justifies an emergency change on its own.
Description
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 5.85% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- wordpress/peter\'s math anti-spam for wordpress
- Source
- cve@mitre.org
References
- http://docs.google.com/View?docid=df36cd52_19xzmkwqcg
- http://www.securityfocus.com/archive/1/486331/100/200/threaded
- http://www.securityfocus.com/bid/27287Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39688
- http://docs.google.com/View?docid=df36cd52_19xzmkwqcg
- http://www.securityfocus.com/archive/1/486331/100/200/threaded
- http://www.securityfocus.com/bid/27287Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39688
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.