Ajax BootModal Login <= 1.4.3 - CAPTCHA Reuse
mediumAn issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form, login form, and password-recovery form require solving a CAPTCHA to perform actions. However, this is required only once per user session, and therefore one could send as many requests as one wished by automation.
- CVSS:
- 5.3
- Affected:
- up to 1.4.3
- Fix:
- No patched version reported
- Disclosed:
- Aug 26, 2018