Bestwebsoft Google Captcha vulnerabilities

2 CVEs affecting Bestwebsoft Google Captcha, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24628, published 2025-01-27.

More from Bestwebsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0890, published 2015-03-03. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified…
• CVE-2025-24628, published 2025-01-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Authentication Bypass by Spoofing vulnerability in bestwebsoft Google Captcha google-captcha allows Identity Spoofing.This issue affects Google Captcha: from n/a through <= 1.78.