WordPress Advanced Google reCAPTCHA plugin <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter vulnerability

Authenticated Subscriber+ Limited SQL Injection via 'sSearch' Parameter vulnerability discovered by Muhamad Visat in WordPress Plugin Advanced Google reCAPTCHA versions = 1.29...

CVE-2025-2074: Improper Neutralization of Special Elements used in an SQL Command

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in all versions up to, and including, 1.29 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

PT-2025-13445

Name of the Vulnerable Software and Affected Versions Advanced Google reCAPTCHA plugin for WordPress versions up to 1.29 Description The issue allows for generic SQL Injection via the sSearch parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation ...