JVN#55063777: Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass

Google Captcha (reCAPTCHA) by BestWebSoft is a plugin for WordPress. Google Captcha (reCAPTCHA) by BestWebSoft contains a CAPTCHA authentication bypass vulnerability (CWE-254).

Impact

If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without authentication.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Google Captcha (reCAPTCHA) by BestWebSoft V1.12 and earlier