WordPress plugin
Conditional CAPTCHA security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Conditional CAPTCHA vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Open Redirect ≤4.0.0No patch available | CVE-2026-1369 |
- Medium5.3Unauthenticated Open Redirect
≤4.0.0No patch available
Conditional CAPTCHA: common questions
Does Conditional CAPTCHA have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Conditional CAPTCHA: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Conditional CAPTCHA I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Conditional CAPTCHA vulnerability?
CVE-2026-1369, published Jan 31, 2026: Conditional CAPTCHA <= 4.0.0 - Unauthenticated Open Redirect. Severity: Medium (CVSS 5.3).
Is any Conditional CAPTCHA vulnerability listed in CISA KEV?
No. None of the known Conditional CAPTCHA vulnerabilities is currently listed in the CISA KEV catalog.