Hi @nerocd,
Thank you for bringing this to our attention. We appreciate you taking the time to report the potential security issue with the current version of CAPTCHA 4WP.
Our development team is currently reviewing the issue and will investigate it further. We’ll keep you updated once we have more information.
Thank you for your patience and for helping us improve the plugin.
Kind Regards,
Mej
Hi @nerocd
Just to mention that it’s not exactly a security issue. It’s a way for bots to go successfully through the captcha check if they are specifically made to use this specific bypass vulnerability.
As the patchstack reports says it’s Low priority – No impactful threat
Having the plugin active does not mean you have a security issue on the site. So in case you’re worried about that, everything is fine, don’t worry.
We are working on a patch for that issue, but it’s a very important piece of the system and needs to be handled carefully, to avoid the patch causing regular visitors to not be able to pass the captcha check.
A patch is being tested at the moment, if all is fine we’ll release it on Monday.
