CVE-2022-4036: Guessable CAPTCHA

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie...

Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass

The plugin does not have a strong hashing algorithm on the CAPTCHA secret, and displays it to the user via a cookie, which could allow them to bypass the protection in place...

The vulnerability of the HNAP1 protocol implementation in the microprogramming-based router software of D–Link DIR-823G allows a attacker to execute arbitrary commands.

The vulnerability of the HNAP1 protocol implementation in the microprogramming-based router software of D–Link DIR-823G is related to insufficient checking of arguments transmitted in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by entering...

Cloudflare Takes a Stab at a Captcha That Doesn’t Suck

The internet infrastructure company has an alternative tool to check whether you’re human—and it doesn’t force you to pick out buses in tiny boxes...

CVE-2022-2913

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen...

Design/Logic Flaw

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen...

CVE-2022-2913 Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen...

CVE-2022-2913

CVE-2022-2913 affects the Login No Captcha reCAPTCHA WordPress plugin prior to 1.7. Root cause: improper IP check in get_ip_address allows spoofing on the allow list, bypassing the captcha on the login screen. Impact is a login-time bypass (medium risk; CVSS v3.1: 4.3). Remediation: upgrade to ve...

CVE-2022-2913

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen...

CVE-2022-2913 Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen...

PT-2022-19416 · WordPress · Login No Captcha Recaptcha

Name of the Vulnerable Software and Affected Versions: Login No Captcha reCAPTCHA WordPress plugin versions prior to 1.7 Description: The issue allows attackers to spoof IP addresses on the allow list, bypassing the need for captcha on the login screen due to improper IP address checking...

WordPress plugin Login No Captcha reCAPTCHA 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2022-2913: Authorization Bypass Through User-Controlled Key

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen...

CVE-2022-37411

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

CVE-2022-37411

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

CVE-2022-37411 WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

CVE-2022-37411

CVE-2022-37411 covers a Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza’s WordPress Captcha Code plugin, affecting versions ≤ 2.7. The root cause is a missing/incorrect CSRF check when saving plugin settings, which could allow an attacker to trigger unintended admin actions via a...

CVE-2022-37411 WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Vinoj Cardoza's Captcha Code plugin = 2.7 at WordPress...

WordPress plugin Captcha Code 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...