blueways vulnerabilities

Products

• blueways/bw-captcha 1

Latest blueways CVEs

Newest publication first

1. CVE-2026-112067 Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)

   Published 2026-10-20

   Medium·CVSS 6.9 EPSS 0.38%

   The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image can read the answer from it and submit it, so automated clients can pass the challenge. This applies to the default configuration, because th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.