Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-1262 EUVD-2025-5445GHSA-9p5c-4hgp-xhpr

Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass

Published Feb 25, 2025 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . This makes it possible for unauthenticated attackers to bypass the Built-in Math Captcha Verification.

Affected products

VendorProductAffectedFixed
webfactory Advanced Google reCAPTCHA ≤ 1.27 —

References