Skip to content
OpenAdvisories

Product · jotis

Blue Captcha

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-10552

    Blue Captcha <= 2.0.1 - Cross-Site Request Forgery via 'blcap_action' Parameter

    The Blue Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.0.1. This is due to missing or incorrect nonce validation on the main admin panel (blcap_main_page) and on the Hall of Shame and Log subpages, …

    jotis Blue Captcha Web / CMS