← volver
CVE-2022-2913

Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass

CVSS 4.3 MEDIUMEPSS 0.6%CWE-639
The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →