reCAPTCHA for Asgaros Forum

reCAPTCHA for Asgaros Forum has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for reCAPTCHA for Asgaros Forum has a vendor fix available, so running the current release closes it.

All of these findings were reported by HieuPenguinnn. reCAPTCHA for Asgaros Forum is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all reCAPTCHA for Asgaros Forum vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-57365

reCAPTCHA for Asgaros Forum <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv2.0.1

reCAPTCHA for Asgaros Forum

Hitesh Chandwani

Author

Hitesh Chandwani

5.0(3)
100/100
Last Updated
2026-05-20 (3mo ago)
Active Installs
4,000+
Downloads
71,948
Requires WP
4.7+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2018-11-09 (8y ago)

reCAPTCHA (v2 & v3) for Asgaros Forum is a free plugin/add-on for Asgaros Forum, that allow you to easily add Google reCAPTCHA v2 or Google reCAPTCHA v3 on your Asgaros Forum. reCAPTCHA (v2 & v3) for Asgaros Forum prevent spam from creating new topics or replies. This plugin is built to integrate seamlessly with your Asgaros Forum enabled WordPress website. reCAPTCHA (v2 & v3) for Asgaros Forum is very easy to use and work for guest users as well as Logged-in users. Premium Features Upgrade to Pro to unlock additional CAPTCHA providers and advanced spam protection features. Pro version currently includes: Cloudflare Turnstile support More premium anti-spam features are planned for future releases.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C