Vulnerability Description
The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bestwebsoft | Captcha | <= 4.0.6 |
References
- http://jvn.jp/en/jp/JVN93727681/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000029Vendor Advisory
- https://wordpress.org/plugins/captcha/changelog/
- http://jvn.jp/en/jp/JVN93727681/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000029Vendor Advisory
- https://wordpress.org/plugins/captcha/changelog/
FAQ
What is CVE-2014-9283?
CVE-2014-9283 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.
How severe is CVE-2014-9283?
CVE-2014-9283 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-9283?
Check the references section above for vendor advisories and patch information. Affected products include: Bestwebsoft Captcha.