Cross-Site Scripting Vulnerabilities in Captcha Plugin for WordPress
CVE-2008-0206

Currently unrated

Key Information:

Vendor: Wordpress
Status: Captcha
Vendor: CVE Published:; 10 January 2008

What is CVE-2008-0206?

Multiple cross-site scripting (XSS) vulnerabilities exist in the Captcha plugin, specifically in the captcha.php file. These vulnerabilities enable remote attackers to inject arbitrary web scripts or HTML code through various parameters such as captcha_ttffolder, captcha_numchars, captcha_ttfrange, and captcha_secret. This exploitation can lead to unauthorized actions being executed on behalf of users, potentially compromising sensitive information and the integrity of the website.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch