Robertpeake vulnerabilities
We track 1 vulnerability in Robertpeake products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Robertpeake vulnerabilities
- 7.2 High severity
Login No Captcha reCAPTCHA: Improper Neutralization of Input During Web Page Generation
The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `$_SERVER['PHP_SELF']` superglobal in all versions up to, and including, 1.8.0. This is due to the `authenticate()` function storing the unsanitized output