CVE-2026-66674

Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...

CVE-2026-66632

Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...

CVE-2026-66674 WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability

Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...

EUVD-2026-75512

Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...

EUVD-2026-75511

Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...

CVE-2026-66632 WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Content Injection vulnerability

Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...

CVE-2026-66674

CVE-2026-66674 affects the Simple Cloudflare Turnstile WordPress plugin, versions

CVE-2026-66632

CVE-2026-66632 is an unauthenticated Content Injection vulnerability in the WordPress plugin Simple Cloudflare Turnstile , affecting versions 1.42.1 and earlier . Discovered by kta1kri , the flaw allows a remote attacker with no prior access or user interaction to inject content, carrying a CVSS ...

WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Content Injection vulnerability

Content Injection vulnerability discovered by kta1kri in WordPress Plugin Simple Cloudflare Turnstile versions = 1.42.1...

WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability

Captcha Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Cloudflare Turnstile versions = 1.42.1...

PT-2026-49435

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile = 1.38.0 versions...

CVE-2023-5135

CVE-2023-5135 concerns the WordPress plugin “Simple Cloudflare Turnstile.” A stored XSS flaw exists in versions up to and including 1.23.1 due to insufficient input sanitization and output escaping on user-supplied attributes in the gravity-simple-turnstile shortcode. Exploitation requires an aut...

WordPress Simple Cloudflare Turnstile Plugin <= 1.23.1 is vulnerable to Cross Site Scripting (XSS)

Software Simple Cloudflare Turnstile Type Plugin Vulnerable versions = 1.23.1 Fixed in 1.23.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5135 Patch priority Low CVSS severity Low 6.5 Developer RelyWP PSID 89023cff61f7 Credits Lana Codes Required...

PT-2023-31787 · Cloudflare · Simple Cloudflare Turnstile

Name of the Vulnerable Software and Affected Versions: The Simple Cloudflare Turnstile plugin for WordPress versions up to, and including, 1.23.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes...