Vulnerabilities / hCaptcha for WP
hCaptcha for WP vulnerabilities
Advisories WPSec published for hCaptcha for WP. Other sources may list more. Its attack surface: hCaptcha for WP on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0022 | hCaptcha for WP <= 5.3.0 - Unauthenticated hCaptcha Bypass via Passster REST Unlock Endpoint | Low 3.7 | 5.4.0 |
| 2026-10-01 | WPSEC-2026-0021 | hCaptcha for WP <= 5.3.0 - Unauthenticated hCaptcha Bypass via Expired or Evicted Auto-Verification Registration | Low 3.7 | 5.4.0 |
| 2026-10-01 | WPSEC-2026-0020 | hCaptcha for WP <= 5.3.0 - Unauthenticated Denial of Service via Unbounded Failed Login Data | Medium 5.3 | 5.4.0 |
| 2026-10-01 | WPSEC-2026-0019 | hCaptcha for WP <= 5.3.0 - Unauthenticated hCaptcha Bypass via LearnPress Checkout Account Creation | Low 3.7 | 5.4.0 |
License: CC BY 4.0