Medium · 5.3 CVE-2025-24628 EUVD-2025-3829GHSA-hmhc-953c-9459

WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability

Published Jan 27, 2025 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: bestwebsoft Product: Google Captcha

Description

Authentication Bypass by Spoofing vulnerability in bestwebsoft Google Captcha google-captcha allows Identity Spoofing.This issue affects Google Captcha: from n/a through <= 1.78.

Affected products

Vendor	Product	Affected	Fixed
bestwebsoft	Google Captcha	≤ 1.78	—

References

https://patchstack.com/database/Wordpress/Plugin/google-captcha/vulnerability/wordpress-recaptcha-by-bestwebsoft-plugin-1-78-captcha-bypass-vulnerability?_s_id=cve vdb-entry