CVE-2023-44236

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

CVE-2023-44236

Summary: CVE-2023-44236 affects the WordPress plugin “WP Captcha” (WP Captcha) up to version 2.0.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in settings updates, caused by missing CSRF protection. The initial description and connected sources confirm the affected software and the ...

CVE-2023-44236 WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

CVE-2023-44236 WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Devnath verma WP Captcha plugin = 2.0.0 versions...

WordPress Plugin wp-captcha Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin wp-captcha suffers fr...

WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Forms Puzzle Captcha Type Plugin Vulnerable versions = 4.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44997 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID a388bf1f7220 Credits Rio Darmawan...

WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Bypass Vulnerability

Software WP Captcha Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2023-44235 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f6995fe04571 Credits qilin99 Required privilege...

WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Captcha Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44236 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID c755ee1f32c5 Credits qilin99 Required privilege...

Jumpserver Information Disclosure Vulnerability

Jumpserver is an open source bastion machine from Hangzhou Feizhiyun Information Technology Co. in China. JumpServer suffers from an information disclosure vulnerability caused by exposing random number seeds to the API, which could allow replay of randomly generated CAPTCHAs, leading to password...

Proton CAPTCHA: New Privacy-First CAPTCHA Defense Against Bots

By Waqas Meet new Proton CAPTCHA from Proton AG, a custom-built CAPTCHA system designed to thwart bots and spammers. Proton… This is a post from HackRead.com Read the original post: Proton CAPTCHA: New Privacy-First CAPTCHA Defense Against Bots...

The vulnerability of the web/captcha.cgi component of the D-Link DIR-815 router’s microprogramming system allows a hacker to trigger a service failure.

The vulnerability of the web/captcha.cgi component of the D-Link DIR-815 router’s microprogramming system is caused by buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

GHSA-93WX-J2QV-49FG hCaptcha for EXT:form Broken Access Control vulnerability

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

Authentication flaw

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. A security vulnerability exists in versions of TYPO3 prior to 2.1.2 that stems from an inability to check if the required CAPTCHA field is submitted in form data, allowing remote...

CVE-2023-41100

CVE-2023-41100 affects the hCaptcha for EXT:form extension in TYPO3 prior to 2.1.2. The issue is that the required captcha field is not checked in form submissions, allowing a remote attacker to bypass the CAPTCHA check. Remediation: upgrade to version 2.1.2 or later (or apply vendor guidance). E...

CVE-2023-41100

An issue was discovered in the hcaptcha aka hCaptcha for EXT:form extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check...