Lucene search
+L

2056 matches found

Cvelist
Cvelist
added 2023/10/11 7:57 a.m.38 views

CVE-2023-44997 WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin = 4.1 versions...

5.4CVSS9AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/11 7:57 a.m.73 views

CVE-2023-44997

Summary (CVE-2023-44997) : A CSRF vulnerability exists in the WordPress plugin WP Forms Puzzle Captcha, affected versions

8.8CVSS7AI score0.00208EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/11 12:0 a.m.7 views

WordPress plugin WP Forms Puzzle Captcha Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.7AI score0.00208EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/10/10 12:0 a.m.17 views

WP Captcha <= 2.0.0 - Captcha Bypass

Description The plugin does not properly check the Captcha, allowing user to bypass it...

6.3AI score0.00428EPSS
SaveExploits0
NVD
NVD
added 2023/10/09 10:15 a.m.30 views

CVE-2023-44236

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

8.8CVSS6.5AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/09 10:15 a.m.6 views

CVE-2023-44236

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

8.8CVSS7.3AI score0.00216EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/09 10:15 a.m.23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

6.8CVSS8.8AI score0.00216EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/09 9:13 a.m.58 views

CVE-2023-44236

Summary: CVE-2023-44236 affects the WordPress plugin “WP Captcha” (WP Captcha) up to version 2.0.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in settings updates, caused by missing CSRF protection. The initial description and connected sources confirm the affected software and the ...

8.8CVSS7AI score0.00216EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/09 9:13 a.m.41 views

CVE-2023-44236 WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

5.4CVSS9AI score0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/09 9:13 a.m.13 views

CVE-2023-44236 WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

5.4CVSS7.1AI score0.00216EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/09 12:0 a.m.14 views

WordPress Plugin wp-captcha Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin wp-captcha suffers fr...

8.8CVSS6.6AI score0.00216EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/10/03 12:0 a.m.17 views

WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Forms Puzzle Captcha Type Plugin Vulnerable versions = 4.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44997 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID a388bf1f7220 Credits Rio Darmawan...

8.8CVSS6.6AI score0.00208EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/09/29 12:0 a.m.19 views

WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Captcha Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44236 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID c755ee1f32c5 Credits qilin99 Required privilege...

8.8CVSS6.6AI score0.00216EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/09/29 12:0 a.m.18 views

WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Bypass Vulnerability

Software WP Captcha Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2023-44235 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f6995fe04571 Credits qilin99 Required privilege...

5.3CVSS6.6AI score0.00428EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/09/27 12:0 a.m.11 views

Jumpserver Information Disclosure Vulnerability

Jumpserver is an open source bastion machine from Hangzhou Feizhiyun Information Technology Co. in China. JumpServer suffers from an information disclosure vulnerability caused by exposing random number seeds to the API, which could allow replay of randomly generated CAPTCHAs, leading to password...

8.2CVSS6.3AI score0.05404EPSS
SaveExploits4References3
HackRead
HackRead
added 2023/09/21 5:55 p.m.24 views

Proton CAPTCHA: New Privacy-First CAPTCHA Defense Against Bots

By Waqas Meet new Proton CAPTCHA from Proton AG, a custom-built CAPTCHA system designed to thwart bots and spammers. Proton… This is a post from HackRead.com Read the original post: Proton CAPTCHA: New Privacy-First CAPTCHA Defense Against Bots...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.7 views

The vulnerability of the web/captcha.cgi component of the D-Link DIR-815 router’s microprogramming system allows a hacker to trigger a service failure.

The vulnerability of the web/captcha.cgi component of the D-Link DIR-815 router’s microprogramming system is caused by buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.5AI score0.0142EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/08/23 6:30 a.m.15 views

GHSA-93WX-J2QV-49FG hCaptcha for EXT:form Broken Access Control vulnerability

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

5.3CVSS5.1AI score0.00515EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/23 6:15 a.m.7 views

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

5.3CVSS5.8AI score0.00515EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/23 6:15 a.m.27 views

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

5.3CVSS5.2AI score0.00515EPSS
SaveExploits0References1
Rows per page
Query Builder