WordPress plugin
Conditional CAPTCHA security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Conditional CAPTCHA vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Conditional CAPTCHA: common questions
Does Conditional CAPTCHA have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Conditional CAPTCHA: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Conditional CAPTCHA I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Conditional CAPTCHA vulnerability?
CVE-2026-1369, published Jan 31, 2026: Conditional CAPTCHA <= 4.0.0 - Unauthenticated Open Redirect. Severity: Medium (CVSS 5.3).
Is any Conditional CAPTCHA vulnerability listed in CISA KEV?
No. None of the known Conditional CAPTCHA vulnerabilities is currently listed in the CISA KEV catalog.