JVN#55063777: Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass

Google Captcha reCAPTCHA by BestWebSoft is a plugin for WordPress. Google Captcha reCAPTCHA by BestWebSoft contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an...

CVE-2014-9283: Undefined Security Weakness

The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

CVE-2015-0890: Undefined Security Weakness

The BestWebSoft Google Captcha aka reCAPTCHA plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

Contact Form 3.82 - Unauthorized Language Manipulation

The Contact Form by BestWebSoft WordPress plugin was affected by an Unauthorized Language Manipulation security vulnerability...

Contact Form 3.36 - contact_form.php cntctfrm_contact_email Parameter XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a contactform.php cntctfrmcontactemail Parameter XSS security vulnerability...

Contact Form 3.34 - contact_form.php cntctfrm_contact_message Parameter XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a contactform.php cntctfrmcontactmessage Parameter XSS security vulnerability...

Contact Form Plugin < 3.52 - XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a XSS security vulnerability...

Gallery 3.06 - Unauthenticated File Upload PHP Code Execution

The Gallery by BestWebSoft WordPress plugin was affected by an Unauthenticated File Upload PHP Code Execution security vulnerability. PoC The vulnerable file was: http://www.example.com/wp-content/plugins/gallery-plugin/upload/php.php...