CVE-2026-121612 is a Weak Authentication vulnerability in the WordPress plugin goodbye-captcha (goodbye-captcha). Versions before 3.6.3 are affected. Fixed in 3.6.3. CVSS score: 4.3 (Medium). Published 2026-11-09.
CVE · Medium
CVE-2026-121612 — Weak Authentication
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-121612 | Weak Authentication | Weak Authentication | Medium 4.3 | < 3.6.3 | 3.6.3 | 2026-11-09 | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.