CAPTCHA Bypass Vulnerability in NivoCart Product by NivoCart

CVE-2026-111278

What is CVE-2026-111278?

The NivoCart e-commerce platform up to version 2.5.1 is vulnerable to a CAPTCHA bypass. This flaw allows unauthenticated attackers to exploit exposed CAPTCHA codes printed in plain text within the HTML of forms. By utilizing pattern matching techniques, attackers can retrieve the CAPTCHA image values, enabling them to automate malicious activities such as spam submissions, unauthorized registrations, and malicious account deletions. It is crucial for users to ensure proper security measures are implemented to safeguard their systems against potential exploitation.

References