WordPress Plugin Vulnerabilities

Conditional CAPTCHA 3.6 - wp-conditional-captcha.php Settings Page CSRF

Description

The Conditional CAPTCHA WordPress plugin was affected by a wp-conditional-captcha.php Settings Page CSRF security vulnerability.

Affects Plugins

Plugin icon
wp-conditional-captcha
Fixed in 3.6.1

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
a85adbfa-6f5b-40d5-884d-135246f42694

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-09-26
Title
Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery
Published
2014-09-19
Title
WordPress File Upload < 2.4.2 - Cross-Site Request Forgery (CSRF)
Published
2021-06-30
Title
Alkubot < 3.0.0 - Unauthorised AJAX call via CSRF
Published
2025-01-16
Title
MFPlugin <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2024-09-24
Title
Premium Packages – Sell Digital Products Securely < 5.9.2 - Cross-Site Request Forgery