CVE-2022-2913
Assigner: WPScan
Published: 2022-09-16T08:40:39
State: PUBLISHED
affected: product: Login No Captcha reCAPTCHA
vendor: Unknown
versions: lessThan: 1.7
status: affected
version: 1.7
versionType: custom
credits: value: Daniel Ruf
descriptions: value: The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.
problemTypes: descriptions: cweId: CWE-639
description: CWE-639 Authorization Bypass Through User-Controlled Key
type: CWE
source: discovery: EXTERNAL
title: Login No Captcha reCAPTCHA < 1.7 - IP Check Bypass
x_generator: WPScan CVE Generator