Advanced Google reCAPTCHA vulnerabilities

2 known vulnerabilities in Advanced Google reCAPTCHA from WebFactory. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Advanced Google reCAPTCHA: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-5415Jun 5, 2026WebFactory

  The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajax_run_tool() AJAX handler re

• 8.8 High severity

  Advanced Google reCAPTCHA: Unrestricted Upload of File with Dangerous Type

  CVE-2026-5411Jun 5, 2026WebFactory

  The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 5.38. This is due to a capability check in the save_ajax