WordPress Plugin Vulnerabilities

Captcha 4.3.6–4.4.4 - Backdoored

Description

The captcha WordPress plugin was affected by a Backdoored security vulnerability.

Affects Plugins

Plugin icon
captcha
Fixed in 4.4.5

References

URL
https://www.wordfence.com/blog/2017/12/backdoor-captcha-plugin/
URL
https://plugins.trac.wordpress.org/changeset/1780758/captcha

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
1e95d819-5034-48d4-b5fc-94bf5b2534f2

Timeline

Publicly Published
2017-12-19 (about 8 years ago)
Added
2017-12-20 (about 8 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-07-23
Title
Multiple Plugins from itayamar - Supply Chain Compromise
Published
2017-12-28
Title
WP No External Links 4.2.1-4.2.2 - Backdoored
Published
2019-03-29
Title
Pipdig Power Pack < 4.8.0 - Vendor Backdoors & Suspicious Code
Published
2014-07-29
Title
Beefbind - BeEF RCE Plugin
Published
2020-04-22
Title
M-Shield & kingof - Fake Malware Backdoor Plugins