Skip to content
OpenAdvisories

Vendor

robertpeake

1 known vulnerabilities.

Products

Login No Captcha reCAPTCHA 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-2374

    Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via PHP_SELF

    The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `$_SERVER['PHP_SELF']` superglobal in all versions up to, and including, 1.8.0. This is due to the `authenticate()` function storing the unsanitized outpu…

    robertpeake Login No Captcha reCAPTCHA Web / CMS