Integrator for Turnstile and reCAPTCHA.

Integrator for Turnstile and reCAPTCHA. has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (67%). Other recurring categories include Missing Authorization.

Every one of the 3 issues recorded for Integrator for Turnstile and reCAPTCHA. has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Integrator for Turnstile and reCAPTCHA. vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-48243

reCAPTCHA for all <= 2.26 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

3 records


2025-05-19 00:00	reCAPTCHA for all <= 2.26 - Cross-Site Request Forgery Integrator for Turnstile and reCAPTCHA. <= 2.26	`CVE-2025-48243`	4.3 Medium	Nabil Irawan	Yes
2025-03-27 00:00	reCAPTCHA for all <= 2.22 - Cross-Site Request Forgery Integrator for Turnstile and reCAPTCHA. <= 2.22	`CVE-2025-30862`	4.3 Medium	Skalucy	Yes
2023-05-15 00:00	reCAPTCHA for all <= 1.22 - Missing Authorization via recaptcha_for_all_image_select Integrator for Turnstile and reCAPTCHA. <= 1.22	`CVE-2023-32599`	4.3 Medium	Jonas Höbenreich	Yes

Showing 1–3 of 3 reports