WP Clinic
Log in Sign up

CVE · Medium

CVE-2024-12034 — Advanced Google reCAPTCHA [advanced-google-recaptcha] < 1.26

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-12034 Advanced Google reCAPTCHA [advanced-google-recaptcha] < 1.26 Generation of Predictable Numbers or Identifiers Medium 5.3 < 1.26 1.26 2024-12-23

CVE-2024-12034

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.