See Keyword Research - Moderately Critical - Cross Site Request Forgery (CSRF) - DRUPAL-SA-CONTRIB-2015-098
#622782: Text for custom theme says "Enter the numbers you hear" #1168740: Disable 3rd-party cookies in reCAPTCHA
See Invoice - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2015-085