Metform Elementor Contact Form Builder reCaptcha Bypass Vulnerability

A vulnerability allowing reCaptcha bypass has been identified in the Metform Elementor Contact Form Builder plugin for WordPress, affecting versions through 3.2.1. The issue arises from inadequate server-side validation of the captcha response during form submissions. This flaw enables unauthenticated attackers to circumvent Captcha protections, potentially allowing bots to submit forms automatically.

Impact

Exploitation of this vulnerability allows for the bypassing of reCaptcha protections, enabling automated form submissions by bots.

Remediation

Users are advised to update the Metform Elementor Contact Form Builder plugin to version 3.2.2 or a newer patched version.