CVE-2026-85117

The Contact Form 7 Captcha plugin for WordPress versions prior to 0.1.9 is vulnerable due to its improper handling of user-submitted data, allowing unauthenticated users to execute arbitrary shortcodes within the rendered forms. This could lead to unauthorized actions or information disclosure on the site. WordPress administrators using this plugin should prioritize updating to the latest version to mitigate potential exploitation risks.