Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Login No Captcha reCAPTCHA Security Bypass - CVE-2022-2913 - Vulnerability Database
WP Plugin Login Recaptcha

WordPress Plugin Login No Captcha reCAPTCHA Security Bypass - CVE-2022-2913

Medium
Reference: CVE-2022-2913
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-2913
Title: WordPress Plugin Login No Captcha reCAPTCHA Security Bypass
Overview:

WordPress Plugin Login No Captcha reCAPTCHA is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass the need for captcha on the login screen by spoofing IP addresses on the allow list. WordPress Plugin Login No Captcha reCAPTCHA version 1.6.11 is vulnerable prior versions may also be affected.