WordPress security by component
Captcha! 2.5d and earlier
Plugin description
Captcha! 2.5d and earlier adds CAPTCHA challenges to WordPress forms to distinguish human users from automated submissions.
Captcha! 2.5d and earlier (captcha) is a WordPress plugin with 2 published CVE records in this archive. The latest tracked vulnerability was published Mar 03, 2015; the highest published CVSS base score is 5.
Plugin slug:
captchaLatest vulnerability
CVE-2014-9283: Captcha: Privilege escalation or authentication bypass
Captcha is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
| Safe version |
|
||
|---|---|---|---|
| Mar 03, 2015 |
CVE-2014-9283
Captcha: Privilege escalation or authentication bypass
Captcha is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVEPending
NVD5.0
|
| Jan 10, 2008 |
CVE-2008-0206
Captcha! 2.5d and earlier: Cross-site scripting
Captcha! 2.5d and earlier is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVEPending
NVD4.3
|