WordPress Plugin Vulnerabilities

CAPTCHA 4WP < 7.6.1 - Unauthenticated CAPTCHA Bypass

Description

The plugin is vulnerable to CAPTCHA Bypass, making it possible for unauthenticated attackers to bypass CAPTCHA.

Affects Plugins

Plugin icon
advanced-nocaptcha-recaptcha
Fixed in 7.6.1

References

CVE
CVE-2026-32469
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/a7c10b81-bdbb-4089-8d89-42ad2a1fa78f

Miscellaneous

Original Researcher
Chiao-Lin, Yu (Steven Meow)
Verified
No
WPVDB ID
9e2fd84a-0f21-4432-ad57-22f0672d1605

Timeline

Publicly Published
2026-08-06 (about 2 months ago)
Added
2026-08-13 (about 2 months ago)
Last Updated
2026-08-25 (about 1 month ago)

Other

Published
Title
Published
2020-02-10
Title
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Published
2024-06-04
Title
BuddyForms < 2.8.10 - Email Verification Bypass due to Insufficient Randomness
Published
2014-06-26
Title
JSON REST API 1.1 - JSONP SOP Bypass
Published
2023-04-18
Title
CMP – Coming Soon & Maintenance < 4.1.8 - Maintenance Mode Bypass
Published
2017-03-17
Title
Invite Anyone <= 1.3.14 - Change of Email Invitation Content