Wp Recaptcha Integration Vulnerabilities

The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

CVSS:

6.1

Affected:

up to 1.2.5

Fixed in:

1.2.6

Disclosed:

Nov 1, 2024

CVE-2024-8739 on NVD →

The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary...

CVSS:

4.4

Affected:

up to 1.2.7

Fixed in:

1.2.8

Disclosed:

Jul 10, 2024

CVE-2024-37946 on NVD →