The vulnerability identified as CVE-2024-30540 affects the Guido VS Contact Form plugin through a guessable CAPTCHA implementation (CWE-804). This weakness permits attackers to bypass CAPTCHA verification, potentially allowing automated or unauthorized submissions that the CAPTCHA was designed to prevent. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. There is no known exploit in the wild and no official fix or patch has been published as of the data provided.

Successful exploitation of this vulnerability allows an attacker to bypass CAPTCHA protections, potentially enabling automated form submissions or spam. The confidentiality impact is low, with no impact on integrity or availability reported. This could lead to increased spam or abuse of the contact form functionality but does not directly compromise system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing additional anti-spam or rate-limiting controls external to the vulnerable CAPTCHA mechanism to reduce abuse risk.