WordPress Best Web Soft Captcha Plugin 4.1.5 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, such as XSS and CSRF. Because of that, an attacker can send admin a URL crafted for the example, http://wwww.victim.com/wp-admin/admin.php?page=captcha.php&action=whitelist&s=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E or send a form, that will...

WordPress Best Web Soft Captcha 4.1.5 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: BWS Captcha Multiple Vulnerabilities Discovery Date:12.03.2015 Public Disclosure Date:03.10.2016 Exploit Author: Colette Chamberland Contact: email protected Vendor Homepage: http://bestwebsoft.com/ Software Link:...