PT-2018-13262

Name of the Vulnerable Software and Affected Versions ajax-bootmodal-login plugin version 1.4.3 Description The issue concerns the ajax-bootmodal-login plugin for WordPress, where the register, login, and password-recovery forms require solving a CAPTCHA. However, this CAPTCHA is only required on...

CVE-2018-15876: Improper Input Validation

An issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form, login form, and password-recovery form require solving a CAPTCHA to perform actions. However, this is required only once per user session, and therefore one could send as many requests as one wished...