Contact Form 7 reCAPTCHA Plugin

Contact Form 7 reCAPTCHA Plugin Reflected Cross-Site Scripting Vulnerability (CVE-2025-8280) — Medium Severity

The Contact Form 7 reCAPTCHA plugin for WordPress has a security weakness, identified as a Reflected Cross-Site Scripting (XSS) vulnerability. This means a hacker could trick your website into running harmful code in a visitor’s web browser, especially older ones.…

Alex Joseph
February 13, 2026