Multiple Vulnerabilities in WP-reCAPTCHA 2.9.8.2
WordPress® is a popular open-source blogging tool, that millions of websites throughout the world use. WP-reCAPTCHA is an anti-spam plug-in based on reCAPTCHA®.
Affected Application: WP-reCAPTCHA 2.9.8.2.
Issue: On 03/22/2011, multiple injection and cross-site request forgery vulnerabilities were reported in the WP-reCAPTCHA 2.9.8.2 plug-in for WordPress. The vulnerabilities let attackers steal cookies, gain unauthorized access, compromise the application, or perform other malicious actions.
Resolution: An update for WP-reCAPTCHA is available. Please see vendor's website for information.
This information was compiled using information in the National Vulnerability Database. For more information about this issue, see the summary for CVE-2011-0759. To learn more about injection and cross-site scripting vulnerabilities, see Injection Flaws and Cross-Site Scripting.
Website Protection Site Scanner scans for this vulnerability, and many more. To learn about Site Scanner, see Getting Started with Website Protection Site Scanner.