CVE-2022-2913
Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Unknown · Login No Captcha reCAPTCHAWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →