CVE-2024-12034

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts

El complemento Advanced Google reCAPTCHA para WordPress es vulnerable al desbloqueo de IP en todas las versiones hasta la 1.25 incluida. Esto se debe a que el complemento no utiliza una clave única segura al generar una solicitud de desbloqueo. Esto hace posible que atacantes no autenticados desbloqueen su IP después de haber sido bloqueado debido a demasiados intentos de contraseña incorrectos.