CAPTCHA 4WP vulnerabilities
We track 1 vulnerability in CAPTCHA 4WP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest CAPTCHA 4WP vulnerabilities
- 8.8 High severity
CAPTCHA 4WP: Improper Limitation of a Pathname to a Restricted Directory
The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server.