webfactory Advanced Google reCAPTCHA Plugin up to 1.27 on WordPress CAPTCHA Page Captcha

Summaryinfo

A vulnerability marked as problematic has been reported in webfactory Advanced Google reCAPTCHA Plugin up to 1.27 on WordPress. Impacted is an unknown function of the component CAPTCHA Page Handler. The manipulation leads to Captcha. This vulnerability is documented as CVE-2025-1262. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in webfactory Advanced Google reCAPTCHA Plugin up to 1.27 on WordPress. This issue affects an unknown code of the component CAPTCHA Page Handler. The manipulation with an unknown input leads to a captcha vulnerability. Using CWE to declare the problem leads to CWE-804. The product uses a CAPTCHA challenge, but the challenge can be guessed or automatically recognized by a non-human actor. Impacted is integrity. The summary by CVE is:

The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . This makes it possible for unauthenticated attackers to bypass the Built-in Math Captcha Verification.

The weakness was released by Max Boll. The advisory is shared at wordfence.com. The identification of this vulnerability is CVE-2025-1262 since 02/12/2025. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available.

Upgrading to version 1.28 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• WordPress Plugin

Vendor

• webfactory

Name

• Advanced Google reCAPTCHA Plugin

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion