{"api_version":"1","generated_at":"2026-07-23T05:42:20+00:00","cve":"CVE-2008-7216","urls":{"html":"https://cve.report/CVE-2008-7216","api":"https://cve.report/api/cve/CVE-2008-7216.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-7216","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-7216"},"summary":{"title":"CVE-2008-7216","description":"Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-09-11 16:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/27287","name":"http://www.securityfocus.com/bid/27287","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39688","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39688","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg","name":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Defeating math antispam protection pl... - Google Docs","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.securityfocus.com/archive/1/486331/100/200/threaded","name":"http://www.securityfocus.com/archive/1/486331/100/200/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-7216","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7216","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"7216","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"peter\\'s_math_anti-spam_for_wordpress","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T11:56:14.455Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"mathantispam-captcha-security-bypass(39688)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39688"},{"name":"27287","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/27287"},{"name":"20080115 Defeating audio captcha systems","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/486331/100/200/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-01-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"mathantispam-captcha-security-bypass(39688)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39688"},{"name":"27287","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/27287"},{"name":"20080115 Defeating audio captcha systems","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/486331/100/200/threaded"},{"tags":["x_refsource_MISC"],"url":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-7216","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"mathantispam-captcha-security-bypass(39688)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39688"},{"name":"27287","refsource":"BID","url":"http://www.securityfocus.com/bid/27287"},{"name":"20080115 Defeating audio captcha systems","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/486331/100/200/threaded"},{"name":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg","refsource":"MISC","url":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-7216","datePublished":"2009-09-11T16:00:00.000Z","dateReserved":"2009-09-11T00:00:00.000Z","dateUpdated":"2024-08-07T11:56:14.455Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-09-11 16:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:peter\\'s_math_anti-spam_for_wordpress:-:*:*:*:*:*:*:*","matchCriteriaId":"0F50482F-7E89-4B2A-BDA6-43E514C49916"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"7216","Ordinal":"1","Title":"CVE-2008-7216","CVE":"CVE-2008-7216","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"7216","Ordinal":"1","NoteData":"Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.","Type":"Description","Title":"CVE-2008-7216"},{"CveYear":"2008","CveId":"7216","Ordinal":"2","NoteData":"2009-09-11","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"7216","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}