bestwebsoft google captcha vulnerabilities

Latest bestwebsoft google captcha CVEs

Newest publication first

1. CVE-2025-24628 WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability

   Published 2025-01-27

   Medium·CVSS 5.3 EPSS 0.35%

   Authentication Bypass by Spoofing vulnerability in bestwebsoft Google Captcha google-captcha allows Identity Spoofing.This issue affects Google Captcha: from n/a through <= 1.78.

2. CVE-2015-0890 reCaptcha by BestWebSoft <= 1.12 - CAPTCHA Bypass

   Published 2015-03-03

   Medium·CVSS 5.0 EPSS 2.4%

   The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.