Easy Captcha <= 1.0 - Missing Authorization

Description The plugin does not have authorisation in various AJAX actions, which could allow unauthenticated users to call them and perform unauthorised actions...

Easy Captcha <= 1.0 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress CAPTCHA 4WP Plugin <= 7.0.5 is vulnerable to Cross Site Scripting (XSS)

Software CAPTCHA 4WP Type Plugin Vulnerable versions = 7.0.5 Fixed in 7.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Melapress PSID 538e2b5c193e Credits Rafie Muhammad Patchstack Required privilege...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

CVE-2023-33312

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

CVE-2023-33312

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

CVE-2023-33312 WordPress Easy Captcha Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wppal Easy Captcha plugin = 1.0 versions...

CVE-2023-33312

CVE-2023-33312 is an unauthenticated, reflected XSS vulnerability in WordPress plugin Easy Captcha (

CVE-2023-37758

The CVE-2023-37758 entry affects D-LINK DIR-815 v1.01 with a buffer overflow in the /web/captcha.cgi component. The issue is described consistently across multiple sources (NVD/Red Hat/CVE List and related databases). The root cause is a buffer overflow in the captcha.cgi handler, enabling potent...

D-LINK DIR-815 安全漏洞

The D-Link DIR-815 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-LINK DIR-815 v1.01, which stems from the discovery of a contained buffer overflow vulnerability via component /web/captcha.cgi...

WordPress Plugin Easy Captcha 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Turnstile Cloudflare CAPTCHA - A friendly, free CAPTCHA replacement Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Turnstile Cloudflare CAPTCHA - A friendly, free CAPTCHA replacement Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

WordPress Easy Math Captcha for CF7 Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Easy Math Captcha for CF7 Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c64d705fa07e Credits Rafie Muhammad Patchstac...

CVE-2023-38068

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...

CVE-2023-38068

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...

Design/Logic Flaw

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...

CVE-2023-38068

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...

CVE-2023-38068

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...

CVE-2023-38068

JetBrains YouTrack CVE-2023-38068 affects YouTrack prior to 2023.1.16597, where captcha validation for Helpdesk forms is insufficient. This is the underlying cause of the vulnerability described across sources (notably Red Hat/PRION/CNNVD/NVD/CVE records). Reported impact indicates potential info...