Login No Captcha reCAPTCHA vulnerabilities
1 known vulnerability in Login No Captcha reCAPTCHA from Robertpeake. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
Login No Captcha reCAPTCHA: Improper Neutralization of Input During Web Page Generation
The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `$_SERVER['PHP_SELF']` superglobal in all versions up to, and including, 1.8.0. This is due to the `authenticate()` function storing the unsanitized output