WordPress Plugin Vulnerabilities

PlusCaptcha Plugin < 2.1.0 - Cross-Site Request Forgery (CSRF)

Description

The PlusCaptcha WordPress plugin was affected by a Cross-Site Request Forgery (CSRF) security vulnerability.

Affects Plugins

Plugin icon
pluscaptcha
Fixed in 2.1.0

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
147434eb-1339-4924-b0ad-489ca4d37c34

Timeline

Publicly Published
2015-03-22 (about 11 years ago)
Added
2015-03-31 (about 11 years ago)
Last Updated
2015-07-04 (about 10 years ago)

Other

Published
Title
Published
2023-09-29
Title
WP Captcha <= 2.0.0 - Settings Update via CSRF
Published
2024-04-05
Title
Easy Digital Downloads < 3.2.7 - Cross-Site Request Forgery
Published
2023-06-02
Title
Online Booking & Scheduling Calendar for WordPress by vcita < 4.5.2 - Denial of Service via CSRF
Published
2025-10-12
Title
Contest Gallery < 28.0.1 - Cross-Site Request Forgery
Published
2023-06-13
Title
Disable WordPress Update Notifications < 2.4.2 - Settings Update via CSRF