WordPress Plugin Vulnerabilities

Captcha 2.12-3.8.1 - Captcha Bypass

Description

The captcha WordPress plugin was affected by a Captcha Bypass security vulnerability.

Affects Plugins

Plugin icon
captcha
Fixed in 3.8.2

References

URL
http://www.antoine-cervoise.fr/2014/03/27/contournement-du-plugin-captcha-pour-wordpress-v-3-8-1-et-anterieures/
URL
https://github.com/cervoise/pentest-scripts/blob/master/web/cms/captcha-bypass/wordpress-plugins/captcha/bypass-3.8.1-and-previous.php

Miscellaneous

Verified
No
WPVDB ID
66aaabac-a78c-467f-9de2-8b2f642ca913

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
Published
2016-04-01
Title
Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass
Published
2023-03-06
Title
Formidable Forms < 6.1 - IP Spoofing
Published
2024-01-31
Title
BookIt <= 2.4.0 - Price Bypass
Published
2024-05-28
Title
Login with phone number < 1.7.27 - Authentication Bypass due to Missing Empty Value Check