CVE-2024-12034

The Advanced Google reCAPTCHA plugin for WordPress before version 1.26 contains a weakness in its IP blocking mechanism that allows unauthenticated users to bypass lockouts. The vulnerability stems from the plugin's use of insufficiently random keys when creating unblock requests, enabling attackers who have been temporarily blocked after multiple failed login attempts to regain access without proper authorization.

Based on public CVE data (MITRE/NVD).