Advisories · Technology

WebFactory Advanced Google reCAPTCHA.

Every CVE that names WebFactory Advanced Google reCAPTCHA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-100518 CVE record

CVSS 5.3 Medium

WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability
- WebFactory Advanced Google reCAPTCHA
- Authentication bypass
Not analysed yet 6 Oct 2026
CVE-2026-5411 CVE record

CVSS 8.8 High

WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
- webfactory Advanced Google reCAPTCHA
- Unrestricted file upload
Not analysed yet 5 Jun 2026
CVE-2026-5415 CVE record

CVSS 8.8 High

WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link
- webfactory Advanced Google reCAPTCHA
- Authentication bypass
Not analysed yet 5 Jun 2026
CVE-2025-2074 CVE record

CVSS 5.3 Medium

Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter
- webfactory Advanced Google reCAPTCHA
- SQL injection
Not analysed yet 28 Mar 2025
CVE-2025-1262 CVE record

CVSS 5.3 Medium

Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
- webfactory Advanced Google reCAPTCHA
- CWE-804
Not analysed yet 25 Feb 2025
CVE-2024-12034 CVE record

CVSS 5.3 Medium

Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
- webfactory Advanced Google reCAPTCHA
- CWE-340
Not analysed yet 24 Dec 2024