WordPress Plugin Vulnerabilities

FunCaptcha 0.4.3 - wp_funcaptcha_admin_activate.php URI XSS

Description

The funcaptcha WordPress plugin was affected by a wp_funcaptcha_admin_activate.php URI XSS security vulnerability.

Affects Plugins

Plugin icon
funcaptcha
Fixed in 0.4.4

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
daf4e11a-48c1-4aa3-8b45-71300d64e4f6

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-07-11
Title
PeoplePond <= 1.1.9 - CSRF to Stored XSS
Published
2025-01-16
Title
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2022-05-09
Title
BannerMan <= 0.2.4 - Multiple Admin+ Stored Cross-Site Scripting
Published
2025-04-03
Title
Category Posts Widget < 4.9.20 - Admin+ Stored XSS
Published
2021-06-09
Title
Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)