Bestwebsoft Captcha By Bestwebsoft vulnerabilities

2 CVEs affecting Bestwebsoft Captcha By Bestwebsoft, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-39772, published 2026-10-06.

More from Bestwebsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-31295, published 2024-05-17. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Guessable CAPTCHA vulnerability in BestWebSoft Captcha by BestWebSoft allows Functionality Bypass.This issue affects Captcha by BestWebSoft: from n/a through 5.2.0.
• CVE-2026-39772, published 2026-10-06. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.