What’s Vulnerable › Vulnerabilities
CVE-2008-7216
- Severity: medium (CVSS 4.3 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 5.8% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2009-09-11 · updated 2026-06-16
- Weakness: CWE-264
Description
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.
Affected products
- WordPress Peter'S Math Anti-Spam For Wordpress: all versions
References
- http://docs.google.com/View?docid=df36cd52_19xzmkwqcg
- http://www.securityfocus.com/archive/1/486331/100/200/threaded
- http://www.securityfocus.com/bid/27287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39688
- http://docs.google.com/View?docid=df36cd52_19xzmkwqcg
- http://www.securityfocus.com/archive/1/486331/100/200/threaded
- http://www.securityfocus.com/bid/27287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39688
Get alerted when CVE-2008-7216 or the next vulnerability affects your stack