CVE-2025-1262

—

CVSS 3.1

5.3 medium

EPSS

<1%p27

Published

Feb 25, 2025 (Feb 25, 2025)

Modified

Jun 17, 2026

Description

The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . This makes it possible for unauthenticated attackers to bypass the Built-in Math Captcha Verification.

Vendors: webfactoryltd
Products: advanced google recaptcha
Ecosystems: WordPress
Weakness: CWE-804
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.