Hcaptcha For Wp
Monthly
Bypassing the CAPTCHA protection in the hCaptcha for WP plugin (hcaptcha-for-forms-and-more) up to version 5.3.0 allows unauthenticated remote attackers to submit forms without solving the challenge, defeating the anti-bot gate on login, registration, comment, WooCommerce, or contact forms. This authentication bypass by spoofing (CWE-290) is rated CVSS 5.3 and has limited impact, as it does not directly compromise data or the site. No public exploit code has been identified at time of analysis, and exploitation requires hCaptcha to be actively enabled on at least one form.
Bypassing the CAPTCHA protection in the hCaptcha for WP plugin (hcaptcha-for-forms-and-more) up to version 5.3.0 allows unauthenticated remote attackers to submit forms without solving the challenge, defeating the anti-bot gate on login, registration, comment, WooCommerce, or contact forms. This authentication bypass by spoofing (CWE-290) is rated CVSS 5.3 and has limited impact, as it does not directly compromise data or the site. No public exploit code has been identified at time of analysis, and exploitation requires hCaptcha to be actively enabled on at least one form.