WordPress Plugin Vulnerabilities

CAPTCHA 4WP <= 7.6.0 - Unauthenticated CAPTCHA Bypass

Description

The plugin is vulnerable to CAPTCHA Bypass, making it possible for unauthenticated attackers to bypass CAPTCHA.

Affects Plugins

Plugin icon
advanced-nocaptcha-recaptcha
No known fix

References

CVE
CVE-2026-32469
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/a7c10b81-bdbb-4089-8d89-42ad2a1fa78f

Miscellaneous

Original Researcher
Chiao-Lin, Yu (Steven Meow)
Verified
No
WPVDB ID
9e2fd84a-0f21-4432-ad57-22f0672d1605

Timeline

Publicly Published
2026-08-06 (about 18 days ago)
Added
2026-08-13 (about 10 days ago)
Last Updated
2026-08-13 (about 10 days ago)

Other

Published
Title
Published
2022-05-17
Title
iQ Block Country <= 1.2.28 - Protection Bypass due to IP Spoofing
Published
2019-10-31
Title
Currency Switcher for Woocommerce < 2.11.2 - Security Restrictions Bypass
Published
2026-02-17
Title
Brevo < 3.3.1 - Unauthenticated Authorization Bypass via Type Juggling
Published
2022-12-12
Title
WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API
Published
2023-05-08
Title
Hide My WP Ghost – Security < 5.0.20 - IP Address Spoofing