Skip to content
OpenAdvisories

Vendor

webfactory

34 known vulnerabilities.

Products

Advanced Google reCAPTCHA 6 WP Reset 3 Login Lockdown & Protection 3 Order Export for WooCommerce 2 WP Reset PRO 2 Minimal Coming Soon – Coming Soon Page 2 Captcha Code 2 Email Log 2 Under Construction 2 Guest Author 1 AiBud WP 1 WordPress Charts 1 Login Lockdown 1 Maps Widget for Google Maps 1 WP Force SSL & HTTPS SSL Redirect 1 Login Lockdown – Protect Login Form 1 AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o 1 Database Reset 1 Under Construction Page (Pro) 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-5411 Public exploit

    WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

    The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 5.38. This is due to a capability check in the save_aja…

    webfactory Advanced Google reCAPTCHA Web / CMS
  • High 8.8
    CVE-2026-5415 Public exploit

    WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link

    The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajax_run_tool() AJAX handler r…

    webfactory Advanced Google reCAPTCHA Web / CMS