Description
WordPress Plugin Captcha by BestWebSoft is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass intended restrictions. WordPress Plugin Captcha by BestWebSoft version 3.8.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.8.8 or latest
References
Related Vulnerabilities
MySQL CVE-2015-0501 Vulnerability (CVE-2015-0501)
WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (3.2.4)
WordPress Plugin Product Catalog Unspecified Vulnerability (3.1.3)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.8.4)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0372)