Recaptcha For All Vulnerabilities

The reCAPTCHA for all plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.26. This is due to missing or incorrect nonce validation in the 'dashboard-keys.php' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request...

CVSS:

4.3

Affected:

up to 2.26

Fixed in:

2.27

Disclosed:

May 19, 2025

CVE-2025-48243 on NVD →

The Cloudflare Turnstile or reCAPTCHA For any Pages, to Block Spam and Hackers Attack. plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.22. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to...

CVSS:

4.3

Affected:

up to 2.22

Fixed in:

2.23

Disclosed:

Mar 27, 2025

CVE-2025-30862 on NVD →

The reCAPTCHA for all plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the recaptcha_for_all_image_select function in versions up to, and including, 1.22. This makes it possible for authenticated attackers , with subscriber-level access and above, to change...

CVSS:

4.3

Affected:

up to 1.22

Fixed in:

1.23

Disclosed:

May 15, 2023

CVE-2023-32599 on NVD →