Description
WordPress Plugin Flexible Captcha is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass the captcha with a modified submission at login. WordPress Plugin Flexible Captcha version 4.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.0.1 or latest
References
Related Vulnerabilities
MyBB Other Vulnerability (CVE-2007-1964)
WordPress Plugin AB Press Optimizer Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
Liferay Portal CVE-2021-38266 Vulnerability (CVE-2021-38266)
WordPress Plugin Stop User Enumeration User Enumeration (1.3.4)
WebLogic Improper Access Control Vulnerability (CVE-2026-60343)