Description The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS. References https://wordpress.org/plugins/cf7-invisible-recaptcha/#developers https://www.pluginvulnerabilities.com/2018/05/17/reflected-cross-site-scripting-xss-vulnerability-in-cf7-invisible-recaptcha/