Vulnerabilities (CVE)

Filtered by vendor Bozdoz Subscribe
Filtered by product Recaptcha Jetpack
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-3940 1 Bozdoz 1 Recaptcha Jetpack 2025-05-05 N/A N/A
The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVE-2024-3941 1 Bozdoz 1 Recaptcha Jetpack 2025-05-05 N/A N/A
The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged-in admin add Stored XSS payloads via a CSRF attack.