WordPress plugin
Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤5.2.8No patch available | CVE-2026-39772 | |
| Medium5.3 | Captcha Bypass ≤5.2.0Update to 5.2.1 | CVE-2024-31295 | |
| Medium5.3 | CAPTCHA Bypass <4.0.7Update to 4.0.7 | CVE-2014-9283 |
- Medium5.3Missing Authorization
≤5.2.8No patch available
- Medium5.3Captcha Bypass
≤5.2.0Update to 5.2.1
- Medium5.3CAPTCHA Bypass
<4.0.7Update to 4.0.7
Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms: common questions
Does Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms: 3 medium. At least one is not fixed in the latest version.
How do I check which version of Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms vulnerability?
CVE-2026-39772, published Oct 5, 2026: Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms <= 5.2.8 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms vulnerability listed in CISA KEV?
No. None of the known Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms vulnerabilities is currently listed in the CISA KEV catalog.