CVE-2026-127206 | HookAndHook Image CAPTCHA Plugin up to 3.3.29 Captcha cf7ic_check_if_spam kc_captcha improper authentication

November 12, 2026 Yanac

A vulnerability has been found in HookAndHook Image CAPTCHA Plugin up to 3.3.29 and classified as problematic. This affects the function cf7ic_check_if_spam of the component Captcha. This manipulation of the argument kc_captcha causes improper authentication.

This vulnerability is tracked as CVE-2026-127206. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More