Aimy Captcha-Less Form Guard v20.1 includes a critical security fix. If you are already using the plugin, update your website(s) as soon as possible.
Critical Security Fix
An attacker may pass various security procedures implemented by Aimy Captcha-Less Form Guard and inject a specially crafted PHP object what may lead to remote code execution.
Affected versions: v18.0 to v20.0
The security issue has been fixed in v20.1.
CVE: 2026-65883
I'm using Aimy Captcha-Less Form Guard - what should I do?
Update Aimy Captcha-Less Form Guard to v20.1 as soon as possible using the same update procedures as usual. The security issue will be fixed by the update.
Other Changes
Aimy Captcha-Less Form Guard now shows a warning in the plugin's configuration if all available form guards have been disabled. Previously the warning only appeared in the website's frontend.