Skip to content
Sign in
5.3 Medium

CVE-2024-12034 The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and…

Description

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts

Affected products and versions

Product Affected versions Fixed in
Advanced Google reCAPTCHA 1.25 earliest → 1.25 No fix stated

Other CVEs of Advanced Google reCAPTCHA

The 6 CVEs of Advanced Google reCAPTCHA →
CVE-2026-100518 Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions 5.3 Medium CVE-2026-5411 The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for… 8.8 High CVE-2026-5415 The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for… 8.8 High CVE-2025-2074 The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in… 5.3 Medium
Track this CVE