WordPress plugin
Advanced Google reCAPTCHA security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium4
- Low0
All Advanced Google reCAPTCHA vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link ≤5.38Update to 5.39 | CVE-2026-5415 | |
| High8.8 | Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload ≤5.38Update to 5.39 | CVE-2026-5411 |
- High8.8Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link
≤5.38Update to 5.39
- High8.8Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
≤5.38Update to 5.39
Advanced Google reCAPTCHA: common questions
Does Advanced Google reCAPTCHA have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Advanced Google reCAPTCHA: 2 high, 4 medium. None are known to affect version null.
How do I check which version of Advanced Google reCAPTCHA I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Advanced Google reCAPTCHA vulnerability?
CVE-2026-100518, published Oct 5, 2026: Advanced Google reCAPTCHA <= 5.40 - Unauthenticated Login Protection Bypass. Severity: Medium (CVSS 5.3).
Is any Advanced Google reCAPTCHA vulnerability listed in CISA KEV?
No. None of the known Advanced Google reCAPTCHA vulnerabilities is currently listed in the CISA KEV catalog.