Medium · 5.4 CVE-2025-49374 EUVD-2025-35556GHSA-3jhj-3m5p-2g94

WordPress Captcha.eu plugin <= 1.0.61 - Server Side Request Forgery (SSRF) vulnerability

Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in captcha.eu Captcha.eu captcha-eu allows Server Side Request Forgery.This issue affects Captcha.eu: from n/a through <= 1.0.61.

Affected products

Vendor	Product	Affected	Fixed
captcha.eu	Captcha.eu	≤ 1.0.61	—

References

https://patchstack.com/database/Wordpress/Plugin/captcha-eu/vulnerability/wordpress-captcha-eu-plugin-1-0-61-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry