Description

WordPress Plugin PS PHPCaptcha WP is prone to a Denial of Service vulnerability. Exploiting this issue may allow an attacker to prevent the creation of CAPTCHA, thus denying service to legitimate users. WordPress Plugin PS PHPCaptcha WP version 1.1.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.2.0 or latest

References

https://metamorfosec.com/Files/Advisories/METS-2019-003-Denial_of_Service_in_PS_PHPCaptcha_WP_before_v1.2.0.txt

https://plugins.svn.wordpress.org/ps-phpcaptcha/trunk/README.txt

Related Vulnerabilities

WordPress 4.5.x Denial of Service Vulnerability (4.5 - 4.5.13)

WordPress Plugin Slideshow Pro 'upload.php' Arbitrary File Upload (2.1)

WordPress Plugin Coming Soon Page & Maintenance Mode Cross-Site Request Forgery (1.7.8)

WordPress Plugin Plugmatter Optin Feature Box Multiple SQL Injection Vulnerabilities (2.0.13)

WordPress Plugin Connections Business Directory Cross-Site Scripting (8.5.8)

Severity

High

Classification

CVE-2019-7412 CWE-400 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Tags

Missing Update Denial Of Service