Now officially on WordPress.org

CVE Database / CVE-2017-2171

CVE · Medium

CVE-2017-2171 — reCaptcha by BestWebSoft [google-captcha] < 1.28

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2017-2171 reCaptcha by BestWebSoft [google-captcha] < 1.28 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 1.28 1.28 2017-05-16 —

CVE-2017-2171

The Google Captcha (reCAPTCHA) plugin for WordPress versions prior to 1.28 contains a cross-site scripting vulnerability that enables attackers to execute malicious scripts or inject arbitrary HTML code through the BestWebSoft menu display function. This flaw affects multiple BestWebSoft plugins across various versions, all sharing the same vulnerability in their menu functionality. The vulnerability allows remote attackers to inject and execute arbitrary web content on affected websites without authentication. Users should upgrade Google Captcha to version 1.28 or later to remediate this issue.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings