Captcha.eu

Captcha.eu has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).

Every one of the 2 issues recorded for Captcha.eu has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Captcha.eu is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Captcha.eu vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2025-49374

Captcha.eu <= 1.0.61 - Unauthenticated Server-Side Request Forgery

Read the full analysis

Vulnerability Records

2 records


2025-08-26 00:00	Captcha.eu <= 1.0.60 - Reflected Cross-Site Scripting Captcha.eu <= 1.0.60	`CVE-2025-53579`	6.1 Medium	Nguyen Xuan Chien	Yes
2025-08-19 00:00	Captcha.eu <= 1.0.61 - Unauthenticated Server-Side Request Forgery Captcha.eu <= 1.0.61	`CVE-2025-49374`	7.2 High	ch4r0n	Yes

Showing 1–2 of 2 reports

Latestv1.0.74

Captcha.eu

Author

captcha.eu

5.0(5)

100/100

Last Updated

2026-09-08 (5d ago)

Active Installs

300+

Downloads

11,166

Requires WP

4.9+

Requires PHP

7.0+

Tested up to

WP 6.7.7

Created

2023-04-29 (3y ago)

Captcha.eu is the ultimate solution for GDPR compliant captcha protection. Our plugin is designed to safeguard your website against spam and unwanted bot traffic while ensuring compliance with EU data protection regulations. With Captcha.eu, you can protect all your forms, including login and signup forms, with ease. Our plugin provides out-of-the-box support for popular form plugins such as Ninja Forms, Contact Form 7, Elementor Pro, Gravity Forms, WooCommerce, Mailchimp for WordPress, and Divi. This means you can use Captcha.eu even if you have no technical expertise. To start using our plugin, simply subscribe to our service on www.captcha.eu. If you need support or custom plans, you can contact us at hello@captcha.eu. In today’s digital age, online security is a top priority for businesses and individuals alike. With the increasing prevalence of spam and unwanted bot traffic, it’s more important than ever to have a reliable and effective captcha solution. Captcha.eu offers just that, with its GDPR compliant plugin designed to provide maximum protection while ensuring compliance with EU data protection regulations. Languages German English

View on WordPress.org