Description
WordPress Plugin Captcha by BestWebSoft is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass intended restrictions. WordPress Plugin Captcha by BestWebSoft version 3.8.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.8.8 or latest
References
Related Vulnerabilities
SeoPanel Cross-site Scripting (XSS) Vulnerability (CVE-2020-35930)
Oracle HTTP Server CVE-2013-1862 Vulnerability (CVE-2013-1862)
Internet Information Services Other Vulnerability (CVE-2002-0072)
WordPress Plugin qTranslate X Cross-Site Scripting (3.4.3)
WordPress Plugin Login with Cognito Cross-Site Scripting (1.4.8)