Vulnerabilities > CVE-2022-2184 - Unspecified vulnerability in Wpwhitesecurity Captcha 4WP

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wpwhitesecurity

NVD

Published: 2022-08-01

Updated: 2024-11-21

Summary

The CAPTCHA 4WP WordPress plugin before 7.1.0 lets user input reach a sensitive require_once call in one of its admin-side templates. This can be abused by attackers, via a Cross-Site Request Forgery attack to run arbitrary code on the server.

Vulnerable Configurations

Part	Description	Count
Application	Wpwhitesecurity Wpwhitesecurity Captcha 4WP 1.1 Wpwhitesecurity Captcha 4WP 1.2 Wpwhitesecurity Captcha 4WP 1.3 Wpwhitesecurity Captcha 4WP 2.1 Wpwhitesecurity Captcha 4WP 2.2 Wpwhitesecurity Captcha 4WP 2.3 Wpwhitesecurity Captcha 4WP 2.4 Wpwhitesecurity Captcha 4WP 2.5 Wpwhitesecurity Captcha 4WP 2.6 Wpwhitesecurity Captcha 4WP 2.7 Wpwhitesecurity Captcha 4WP 2.8 Wpwhitesecurity Captcha 4WP 3.1 Wpwhitesecurity Captcha 4WP 4.1 Wpwhitesecurity Captcha 4WP 4.2 Wpwhitesecurity Captcha 4WP 4.3 Wpwhitesecurity Captcha 4WP 4.4 Wpwhitesecurity Captcha 4WP 5.2 Wpwhitesecurity Captcha 4WP 5.3 Wpwhitesecurity Captcha 4WP 5.4 Wpwhitesecurity Captcha 4WP 5.5 Wpwhitesecurity Captcha 4WP 5.6 Wpwhitesecurity Captcha 4WP 5.7 Wpwhitesecurity Captcha 4WP 5.7.1 Wpwhitesecurity Captcha 4WP 6.1.1 Wpwhitesecurity Captcha 4WP 6.1.2 Wpwhitesecurity Captcha 4WP 6.1.3 Wpwhitesecurity Captcha 4WP 6.1.4 Wpwhitesecurity Captcha 4WP 6.1.5 Wpwhitesecurity Captcha 4WP 6.1.6 Wpwhitesecurity Captcha 4WP 6.1.7 Wpwhitesecurity Captcha 4WP 7.0.0 Wpwhitesecurity Captcha 4WP 7.0.1 Wpwhitesecurity Captcha 4WP 7.0.2 Wpwhitesecurity Captcha 4WP 7.0.3 Wpwhitesecurity Captcha 4WP 7.0.6 Wpwhitesecurity Captcha 4WP 7.0.6.1	36

Summary

Vulnerable Configurations

References