Recaptcha By Webdesignby

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-4512 Apr 23, 06:00 LOW POC PATCH Monitor

reCaptcha by WebDesignBy WordPress plugin before version 2.0 fails to sanitize the Site Key setting before injecting it into JavaScript context via the grecaptcha_js() function, enabling site administrators without unfiltered_html capability on multisite installations to inject arbitrary JavaScript that executes for all login page visitors. Publicly available exploit code exists; patch released by vendor.

WordPress XSS Recaptcha By Webdesignby Unknown

NVD WPScan VulDB

CVSS 3.1

3.5

EPSS

0.0%

CVE-2026-4512

EPSS 0% CVSS 3.5

LOW POC PATCH Monitor

reCaptcha by WebDesignBy WordPress plugin before version 2.0 fails to sanitize the Site Key setting before injecting it into JavaScript context via the grecaptcha_js() function, enabling site administrators without unfiltered_html capability on multisite installations to inject arbitrary JavaScript that executes for all login page visitors. Publicly available exploit code exists; patch released by vendor.

WordPress XSS Recaptcha By Webdesignby +1

NVD WPScan VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy