Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.2%	CVE-2026-103347hCaptcha for WP · Authentication Bypass by Spoofing Medium5.3EPSS 0.2%2026-10-01CVE Database V5CVE-2026-103347 Unauthenticated Bypass Vulnerability in hCaptcha for WP <= 5.3.0 versions. EPSS 0.2%Vulnerability hcaptcha #cwe-290	CVE Database V5	2026-10-01
Medium	5.3	EPSS 0.3%	CVE-2026-25315hCaptcha for WP · Missing Authorization Medium5.3EPSS 0.3%2026-02-19CVE Database V5CVE-2026-25315 Missing Authorization vulnerability in hcaptcha hCaptcha for WP hcaptcha-for-forms-and-more allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects hCaptcha for WP: from n/a through <= 4.21.1. EPSS 0.3%Vulnerability hcaptcha	CVE Database V5	2026-02-19
Medium	6.4	EPSS 0.3%	CVE-2024-4014hCaptcha for WP · Cross-site Scripting Medium6.4EPSS 0.3%2024-04-20CVE Database V5CVE-2024-4014 The hCaptcha for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cf7-hcaptcha shortcode in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability hcaptcha #cwe-79	CVE Database V5	2024-04-20

Showing 1–3 of 3 results