Lucene search
+L

2050 matches found

Patchstack
Patchstack
added 2026/02/24 11:49 a.m.9 views

WordPress Conditional CAPTCHA plugin <= 4.0.0 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Bob Matyas in WordPress Plugin Conditional CAPTCHA versions = 4.0.0...

4.3CVSS5.3AI score0.00156EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/02/23 10:52 a.m.8 views

WordPress SiteGuard WP Plugin plugin <= 1.7.9 - Captcha Bypass vulnerability

Captcha Bypass vulnerability discovered by Ahmad in WordPress Plugin SiteGuard WP Plugin versions = 1.7.9...

5.3CVSS5.3AI score0.00187EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/23 7:26 a.m.11 views

CVE-2026-1369

The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

4.3CVSS5.3AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/22 6:16 a.m.7 views

CVE-2026-1369

The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

4.3CVSS0.00156EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/22 6:0 a.m.4 views

CVE-2026-1369 Conditional CAPTCHA <= 4.0.0 - Open Redirect

The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

5.3AI score0.00156EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/22 6:0 a.m.4 views

CVE-2026-1369

The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

5.5AI score0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/22 6:0 a.m.19 views

CVE-2026-1369

CVE-2026-1369 concerns the WordPress plugin Conditional CAPTCHA (versions up to 4.0.0), where an open redirect vulnerability arises because a parameter is not validated before redirecting to its value. Multiple sources (NVD, Red Hat, PatchStack) corroborate the open-redirect impact and the affect...

4.3CVSS5.5AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/22 6:0 a.m.33 views

CVE-2026-1369 Conditional CAPTCHA <= 4.0.0 - Open Redirect

The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

0.00156EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/22 12:0 a.m.10 views

WordPress plugin Conditional CAPTCHA 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There are...

4.3CVSS5.8AI score0.00156EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/22 12:0 a.m.7 views

PT-2026-21418

The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

5.5AI score0.00156EPSS
SaveExploits0References2
HackRead
HackRead
added 2026/02/21 6:20 p.m.5 views

New ClickFix Attack Targets Crypto Wallets and 25+ Browsers with Infostealer

Researchers at CyberProof have identified a new fake captcha campaign linked to the ClickFix operation. This stealthy infostealer targets over 25 browsers, cryptocurrency wallets like MetaMask, and gaming accounts by tricking users into executing malicious PowerShell commands...

5.6AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2026/02/16 1:9 p.m.12 views

ClickFix added nslookup commands to its arsenal for downloading RATs

ClickFix malware campaigns are all about tricking the victim into infecting their own machine. Apparently, the criminals behind these campaigns have figured out that mshta and Powershell commands are increasingly being blocked by security software, so they have developed a new method using...

6.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/02/09 12:0 a.m.10 views

Next-Gen CAPTCHAs: Leveraging the Cognitive Gap for Scalable and Diverse GUI-Agent Defense

The rapid evolution of GUI-enabled agents has rendered traditional CAPTCHAs obsolete. While previous benchmarks like OpenCaptchaWorld established a baseline for evaluating multimodal agents, recent advancements in reasoning-heavy models, such as Gemini3-Pro-High and GPT-5.2-Xhigh have effectively...

5.5AI score
SaveExploits0
OSV
OSV
added 2026/02/03 12:16 a.m.5 views

UBUNTU-CVE-2025-61635

Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects ConfirmEdit:...

5.8AI score0.00356EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/02 11:26 p.m.3 views

CVE-2025-61635 Add rate limiting to ApiFancyCaptchaReload

Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects ConfirmEdit:...

5.3AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/02 11:26 p.m.39 views

CVE-2025-61635 Add rate limiting to ApiFancyCaptchaReload

Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects ConfirmEdit:...

0.00356EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/02/02 11:26 p.m.12 views

CVE-2025-61635

Vulnerability in Wikimedia Foundation ConfirmEdit. This vulnerability is associated with program files includes/FancyCaptcha/ApiFancyCaptchaReload.Php. This issue affects ConfirmEdit:...

5.2AI score0.00356EPSS
SaveExploits0
CVE
CVE
added 2026/02/02 11:26 p.m.23 views

CVE-2025-61635

CVE-2025-61635 affects Wikimedia/MediaWiki ConfirmEdit’s ApiFancyCaptchaReload.Php. The related CVE description (via CVE list and Debian advisory) indicates the issue was addressed by adding rate limiting to ApiFancyCaptchaReload, with fixes shipped in MediaWiki updates (e.g., oldstable bookworm:...

5.1AI score0.00356EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/01/27 2:38 p.m.12 views

ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services

Cybersecurity researchers have disclosed details of a new campaign that combines ClickFix-style fake CAPTCHAs with a signed Microsoft Application Virtualization App-V script to distribute an information stealer called Amatera. "Instead of launching PowerShell directly, the attacker uses this scri...

6.4AI score
SaveExploits0
HackRead
HackRead
added 2026/01/26 12:1 p.m.8 views

New Fake CAPTCHA Scam Abuses Microsoft Tools to Install Amatera Stealer

Another day, another fake CAPTCHA scam, but this one abuses Microsoft’s signed tools...

5.9AI score
SaveExploits0
Rows per page
Query Builder