Medium · 4.3 CVE-2026-121612 EUVD-2026-120115GHSA-6jxg-9vr4-767x

WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.6.2 - Broken Authentication vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Vendor: WPZOOM Product: WPBruiser {no- Captcha anti-Spam}

Description

Weak Authentication vulnerability in WPZOOM WPBruiser {no- Captcha anti-Spam} goodbye-captcha allows Authentication Abuse.This issue affects WPBruiser {no- Captcha anti-Spam}: from n/a through 3.6.2.

Affected products

Vendor	Product	Affected	Fixed
WPZOOM	WPBruiser {no- Captcha anti-Spam}	≤ 3.6.2	—

References

https://patchstack.com/database/wordpress/plugin/goodbye-captcha/vulnerability/wordpress-wpbruiser-no-captcha-anti-spam-plugin-3-6-2-broken-authentication-vulnerability?_s_id=cve vdb-entry