Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via a client-controlled flag in the captcha verification. An attacker can bypass authentication mechanisms by manipulating the flag value during the verification process. Remediation...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via a client-controlled flag in the captcha verification. An attacker can bypass authentication mechanisms by manipulating the flag value during the verification process. Remediation...

PT-2023-10304 · Unknown · Pluscaptcha Plugin

Name of the Vulnerable Software and Affected Versions: PlusCaptcha Plugin versions up to 2.0.6 Description: A vulnerability was found in the PlusCaptcha Plugin, which is classified as problematic. The issue affects some unknown functionality and leads to cross-site scripting. The attack can be...