WordPress Plugin Vulnerabilities

Super CAPTCHA <= 2.2.4 - SQL Injection

Description

The Super CAPTCHA Security Suite – Hardened 3D CAPTCHA WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
super-captcha
Fixed in 2.2.5

References

Exploitdb
17728

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
e2a9baa9-d6c9-426d-a6f6-994fddbfac7d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-06-09
Title
TicketBAI Facturas para WooCommerce < 3.21 - Unauthenticated SQL Injection
Published
2014-11-25
Title
Google Document Embedder <= 2.5.14 - SQL Injection
Published
2025-01-23
Title
Form Builder CP < 1.2.42 - Authenticated (Contributor+) SQL Injection
Published
2025-09-09
Title
Duplicate Page and Post <= 2.9.5 - Authenticated (Contributor+) SQL Injection via meta_key Parameter
Published
2024-08-20
Title
App Builder – Create Native Android & iOS Apps On The Flight < 4.3.4 - Unauthenticated Limited SQL Injection via app-builder-search