All In One WP Security & Firewall <= 4.1.2 - Captcha Bypass
2016-07-31 00:00
sumofpwnStrategic Overview
StatusPatched in 4.1.3
Affected PluginAll-In-One Security (AIOS) – Security and Firewall
Affected Version
<= 4.1.2CVSS5.3Medium
CVE
N/AVulnerability Overview
The All In One WP Security & Firewall for WordPress is vulnerable to Captcha Bypass via multiple routes, allowing automated login attempts to proceed
Technical Analysis
REMEDIATION: Update to version 4.1.3, or a newer patched version --- IDENTIFIER: CWE-804 (Guessable CAPTCHA) The product uses a CAPTCHA challenge, but the challenge can be guessed or automatically recognized by a non-human actor.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C