CVE-2026-111278

NivoCart versions through 2.5.1 are vulnerable to a CAPTCHA bypass vulnerability (CWE-804) because the expected CAPTCHA code is disclosed as plain text within the page HTML. This allows unauthenticated attackers to extract the captcha_image value using pattern matching, enabling them to bypass fo...