WordPress reCAPTCHA for all plugin <= 1.22 - Broken Access Control vulnerability

CVE-2023-32599

What is CVE-2023-32599?

A missing authorization vulnerability exists in the reCAPTCHA for All plugin by Bill Minozzi, which can lead to improperly configured access controls. This issue allows potential attackers to exploit the application, potentially bypassing security measures. Versions of the plugin affected range from n/a up to 1.22, underscoring the necessity for users to ensure proper configurations and security assessments to mitigate risks associated with unauthorized access.

References