CVE-2022-2184

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive requireonce call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server...

CVE-2022-2184

creationtimestamp| type| source ---|---|--- 2022-08-01 16:16:54+00:00| seen| https://t.me/cibsecurity/47318...

CVE-2022-2184 CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRF

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive requireonce call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server...

CVE-2022-2184

The CVE-2022-2184 entry concerns the WordPress CAPTCHA 4WP plugin prior to version 7.1.0. Affected software: CAPTCHA 4WP WordPress plugin (versions before 7.1.0). Root cause: an input flow enables reaching a sensitive require_once call within an admin-side template, which CSRF can abuse. Impact: ...