CVE-2023-3897

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

Hackers Use CAPTCHA Trick on Webflow CDN PDFs to Bypass Security Scanners

A widespread phishing campaign has been observed leveraging bogus PDF documents hosted on the Webflow content delivery network CDN with an aim to steal credit card information and commit financial fraud. "The attacker targets victims searching for documents on search engines, resulting in access ...

CVE-2025-23693

Cross-Site Request Forgery CSRF vulnerability in uosiu Secure CAPTCHA secure-captcha allows Stored XSS.This issue affects Secure CAPTCHA: from n/a through = 1.2...

CVE-2022-47408

An issue was discovered in the fpnewsletter aka Newsletter subscriber management extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people...

CVE-2024-49648

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rafasashi SVG Captcha svg-captcha allows Reflected XSS.This issue affects SVG Captcha: from n/a through = 1.0.11...

WordPress Real Estate Manager plugin <= 7.3 - Captcha Bypass Vulnerability vulnerability

Captcha Bypass Vulnerability vulnerability discovered by Marek Mikita Patchstack Alliance in WordPress Plugin Real Estate Manager versions = 7.3...

CVE-2025-24628

Authentication Bypass by Spoofing vulnerability in bestwebsoft Google Captcha google-captcha allows Identity Spoofing.This issue affects Google Captcha: from n/a through = 1.78...

CVE-2025-24628 WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in bestwebsoft Google Captcha google-captcha allows Identity Spoofing.This issue affects Google Captcha: from n/a through = 1.78...

CVE-2025-24628 WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in bestwebsoft Google Captcha google-captcha allows Identity Spoofing.This issue affects Google Captcha: from n/a through = 1.78...

CVE-2025-24628

CVE-2025-24628 relates to the BestWebSoft Google Captcha (google-captcha) WordPress plugin. It describes an Authentication Bypass by Spoofing vulnerability that could enable identity spoofing against Google Captcha. Affected versions are 1.78 and earlier. Remediation per connected Red Hat/PT Secu...

WordPress plugin Google Captcha 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-5456 · Bestwebsoft · Bestwebsoft Google Captcha

Name of the Vulnerable Software and Affected Versions: BestWebSoft Google Captcha versions 1.78 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability that allows Identity Spoofing. This vulnerability affects the Google Captcha plugin, enabling potenti...

Beware: Fake CAPTCHA Campaign Spreads Lumma Stealer in Multi-Industry Attacks

Cybersecurity researchers are calling attention to a new malware campaign that leverages fake CAPTCHA verification checks to deliver the infamous Lumma information stealer. "The campaign is global, with Netskope Threat Labs tracking victims targeted in Argentina, Colombia, the United States, the...

CVE-2025-23503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in osolwordpress Customizable Captcha and Contact Us customizable-captcha-and-contact-us-form allows Reflected XSS.This issue affects Customizable Captcha and Contact Us: from n/a through = 1.0.2...

CVE-2025-23503

CVE-2025-23503 affects the WordPress plugin Customizable Captcha and Contact Us (NotFound) up to version 1.0.2. It is a Reflected XSS caused by improper neutralization of input during web page generation; no exploit details are provided in the supplied documents. There is no remediation informati...

CVE-2025-23503 WordPress Customizable Captcha and Contact us plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Customizable Captcha and Contact Us allows Reflected XSS. This issue affects Customizable Captcha and Contact Us: from n/a through 1.0.2...

PT-2025-4910 · Unknown · Notfound Customizable Captcha/Contact Us

Name of the Vulnerable Software and Affected Versions: NotFound Customizable Captcha and Contact Us versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. This...

WordPress plugin Customizable Captcha and Contact Us 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

CVE-2025-23693

Cross-Site Request Forgery CSRF vulnerability in uosiu Secure CAPTCHA secure-captcha allows Stored XSS.This issue affects Secure CAPTCHA: from n/a through = 1.2...

CVE-2025-23693

Cross-Site Request Forgery CSRF vulnerability in uosiu Secure CAPTCHA secure-captcha allows Stored XSS.This issue affects Secure CAPTCHA: from n/a through = 1.2...