Remote Code Execution Vulnerability in Google Captcha Plugin for WordPress
CVE-2015-0890

Currently unrated

Key Information:

Vendor
Wordpress
Status
Google Captcha
Vendor
CVE Published:
3 March 2015

Summary

The BestWebSoft Google Captcha plugin for WordPress, prior to version 1.13, is susceptible to a vulnerability that facilitates remote attackers in bypassing the CAPTCHA mechanism. This exploitation can grant unauthorized administrative access through a variety of unspecified methods, posing significant security risks to WordPress installations using this plugin.

References

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000030
third-party-advisoryx_refsource_JVNDB
https://wordpress.org/plugins/google-captcha/changelog/
x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN55063777/index.html
third-party-advisoryx_refsource_JVN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.