Description
WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA version 0.3.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 0.3.3 or latest
References
Related Vulnerabilities
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Multiple Vulnerabilities (4.0.3)
MySQL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-0735)
Moodle Uncontrolled Recursion Vulnerability (CVE-2021-36395)
MySQL CVE-2018-3056 Vulnerability (CVE-2018-3056)
OpenVPN AS Insufficient Session Expiration Vulnerability (CVE-2020-15074)