plugin
4 known security issues reported for the Is Human WordPress plugin. Most recent disclosed Oct 15, 2025.
Running Is Human on your site? Check whether your installed version is affected.
Scan your site free[en] The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval() on user-controlled input, which can lead to execution of attacker-supplie...
The vulnerability exists in /is-human/engine.php. It takes control of the eval() function via the "type" parameter, when the "action" is set to log-reset.
The is-human plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.2 via the /plugins/is-human/engine.php file. This is due to the plugin accepting user-supplied input passed to eval(). This makes it possible for unauthenticated attackers to execute code on the server.
The is-human WordPress plugin was affected by a Remote Comm& Execution security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free