PT-2015-4946

Name of the Vulnerable Software and Affected Versions BestWebSoft Google Captcha plugin versions prior to 1.13 Description The issue allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access. Recommendations For versions prior to 1.13, update to version...

JVN#93727681: BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass

Captcha provided by BestWebSoft is a plugin for WordPress. Captcha contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without authentication...

Contact Form 3.82 - Unauthorized Language Manipulation

The Contact Form by BestWebSoft WordPress plugin was affected by an Unauthorized Language Manipulation security vulnerability...

Contact Form 3.36 - contact_form.php cntctfrm_contact_email Parameter XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a contactform.php cntctfrmcontactemail Parameter XSS security vulnerability...

Contact Form 3.34 - contact_form.php cntctfrm_contact_message Parameter XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a contactform.php cntctfrmcontactmessage Parameter XSS security vulnerability...

Contact Form Plugin < 3.52 - XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a XSS security vulnerability...

Gallery 3.06 - Unauthenticated File Upload PHP Code Execution

The Gallery by BestWebSoft WordPress plugin was affected by an Unauthenticated File Upload PHP Code Execution security vulnerability. PoC The vulnerable file was: http://www.example.com/wp-content/plugins/gallery-plugin/upload/php.php...