Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-2913

Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Login No Captcha reCAPTCHA

  • 1.7 to < 1.7affected

References