With a claim from Wordfence that there is a cross-site request forgery to reflected cross-site scripting vulnerability in the plugin Contact Form With Captcha things don’t really make sense. Here is how they described it:

…

[Read more]