Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-49283 EUVD-2025-17278GHSA-x92c-3vm7-wq3m

WordPress Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jun 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant gdpr-compliant-recaptcha-for-all-forms allows Cross Site Request Forgery.This issue affects Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant: from n/a through <= 4.1.1.

Affected products

VendorProductAffectedFixed
Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant ≤ 4.1.1 —

References