The wpgform plugin prior to 0.94 for WordPress has eval injection in the CAPTCHA calculation.
google forms project google forms