JVN#93727681: BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass

Captcha provided by BestWebSoft is a plugin for WordPress. Captcha contains a CAPTCHA authentication bypass vulnerability (CWE-254).

Impact

If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without authentication.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Captcha V4.0.6 and earlier