plugin

Captcha Code Authentication Vulnerabilities

2 known security issues reported for the Captcha Code Authentication WordPress plugin. Most recent disclosed Nov 24, 2023.

1 high 1 medium

Running Captcha Code Authentication on your site? Check whether your installed version is affected.

Scan your site free

Captcha Code <= 2.9 - Captcha Bypass

medium

The Captcha Code plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.9. This makes it possible for unauthenticated attackers to bypass the Captcha Verification.

CVSS:
5.3
Affected:
up to 2.9
Fixed in:
3.0
Disclosed:
Nov 24, 2023

CVE-2023-48745 on NVD →

Captcha Code <= 2.7 - Cross-Site Request Forgery to Plugin Settings Update

high

The Captcha Code plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7. This is due to missing or incorrect nonce validation on the wp_captcha_general_options function. This makes it possible for unauthenticated attackers to update plugin settings, via forged request gra...

CVSS:
8.8
Affected:
up to 2.7
Fixed in:
2.8
Disclosed:
Sep 1, 2022

CVE-2022-37411 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database