CVE-2025-46541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elrata WP-reCAPTCHA-bp wp-recaptcha-bp allows Stored XSS.This issue affects WP-reCAPTCHA-bp: from n/a through = 4.1...

CVE-2025-46541

CVE-2025-46541 describes a Stored XSS in the WordPress plugin WP-reCAPTCHA-bp (affected: versions n/a through 4.1). The root cause is improper neutralization of input during web page generation, allowing injected scripts to be stored and potentially executed in subsequent views. Connected sources...