Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2022-2184

CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRF

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wpwhitesecurity
Products
Captcha 4wp