Description
WordPress Plugin Enmask Captcha is prone to malicious redirects. Attackers may leverage this issue to promote spam, distribute malware/backdoors, or to perform all kinds of malicious activities. WordPress Plugin Enmask Captcha version 1.3 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
XWiki Missing Authorization Vulnerability (CVE-2022-31167)
Joomla! Core 3.x.x Security Bypass (3.8.0 - 3.9.3)
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3730)
WordPress Plugin BizLibrary Cross-Site Scripting (1.1)
WordPress Plugin Advance Menu Manager Cross-Site Request Forgery (2.9.6)