WordPress Plugin Vulnerabilities

reCaptcha by BestWebSoft < 1.79 - CAPTCHA Bypass

Description

The plugin is vulnerable to CAPTCHA Bypass. This makes it possible for unauthenticated attackers to bypass CAPTCHA protection offered by the plugin

Affects Plugins

Plugin icon
google-captcha
Fixed in 1.79

References

CVE
CVE-2025-24628
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/eee2d5e8-a027-486b-93d8-9fe1501f9ed2

Miscellaneous

Original Researcher
cod3beat
Verified
No
WPVDB ID
aa633292-d49f-4ddb-99c4-b3ef2a2cb142

Timeline

Publicly Published
2025-01-03 (about 1 year ago)
Added
2025-02-20 (about 1 year ago)
Last Updated
2025-02-20 (about 1 year ago)

Other

Published
Title
Published
2019-04-24
Title
WP Database Backup < 5.2 - Unauthenticated OS Command Injection
Published
2015-02-03
Title
UpdraftPlus <= 1.9.50 - Privilege Escalation via Nonce Leakage
Published
2021-01-20
Title
123ContactForm for WordPress <= 1.5.6 - Unauthenticated Arbitrary Post Creation
Published
2017-03-17
Title
BuddyPress Docs <= 1.9.2 - Authenticated Lack of Authorisation
Published
2023-10-03
Title
Captcha/Honeypot for Contact Form 7 < 1.11.4 - Captcha Bypass