Lucene search
+L

30 matches found

Huntr
Huntr
•added 2023/02/21 12:49 p.m.•45 views

Captcha Bypass on login

Description So if we login incorrectly multiple times, we get captcha. Each captcha has "captchaid" and solve "captchacode" For example: "captchacode":"8awt" "captchaid":"7nToXDrT6SkJ2BJxKG1u" You can use same captcha code and captcha id in login without any problem Captcha is generated with -...

5CVSS5.8AI score0.00614EPSS
SaveExploits1
NVD
NVD
•added 2022/09/09 3:15 p.m.•29 views

CVE-2022-37411

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

8.8CVSS0.00361EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/09 3:15 p.m.•14 views

CVE-2022-37411

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

8.8CVSS5.8AI score0.00361EPSS
SaveExploits0References2
Prion
Prion
•added 2022/09/09 3:15 p.m.•23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

6.8CVSS8.8AI score0.00361EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/09/09 2:39 p.m.•72 views

CVE-2022-37411

CVE-2022-37411 covers a Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza’s WordPress Captcha Code plugin, affecting versions ≤ 2.7. The root cause is a missing/incorrect CSRF check when saving plugin settings, which could allow an attacker to trigger unintended admin actions via a...

8.8CVSS7.2AI score0.00361EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/09/09 2:39 p.m.•45 views

CVE-2022-37411 WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

5.4CVSS9.1AI score0.00361EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•13 views

PT-2022-23981 · Vinoj Cardoza · Captcha Code Plugin

Name of the Vulnerable Software and Affected Versions: Vinoj Cardoza's Captcha Code plugin versions = 2.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

8.8CVSS8.6AI score0.00361EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•13 views

WordPress plugin Captcha Code 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.9AI score0.00361EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•6 views

CVE-2022-37411: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

8.8CVSS7.9AI score0.00361EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2022/09/01 12:00 a.m.•22 views

Captcha Code < 2.8 - Settings Update via CSRF

The plugin does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack...

8.8CVSS4.5AI score0.00361EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder