WordPress security by component

Google Captcha

Plugin description

Google Captcha is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 27, 2025; the highest CVE/CNA score is 5.3.

Plugin slug: google-captcha

Latest vulnerability

CVE-2025-24628: Google Captcha: Privilege escalation or authentication bypass

Google Captcha is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.

PublishedJan 27, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jan 27, 2025	CVE-2025-24628 Google Captcha: Privilege escalation or authentication bypass Google Captcha is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE5.3 NVDPending
Mar 03, 2015	CVE-2015-0890 Google Captcha: Privilege escalation or authentication bypass Google Captcha is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.	See mitigation notes	CVE5.0 NVD5.0