CVE-2024-12034— Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
Quick assessment
Affected
webfactory Advanced Google reCAPTCHA
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Advanced Google reCAPTCHA 1.25版本及之前版本存在安全漏洞，该漏洞源于在生成解锁请求时未使用唯一密钥。攻击者利用该漏洞在因多次输入错误密码而被锁定后能够解锁其 IP。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-12034
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
Source: CVE Program / CVE List V5
Vulnerability Description
The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
可预测问题
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress plugin Advanced Google reCAPTCHA 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Advanced Google reCAPTCHA 1.25版本及之前版本存在安全漏洞，该漏洞源于在生成解锁请求时未使用唯一密钥。攻击者利用该漏洞在因多次输入错误密码而被锁定后能够解锁其 IP。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| webfactory | Advanced Google reCAPTCHA | * ~ 1.25 | - |
|
II. Public POCs for CVE-2024-12034
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-12034
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-12034 (1)
IV. Related Vulnerabilities
Same product: Advanced Google reCAPTCHA
Same vendor: webfactory
-
CVE-2026-94457
WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability -
CVE-2026-94174
WordPress Email Log plugin <= 2.63 - SQL Injection vulnerabi -
CVE-2026-11426
UnderConstructionPage PRO <= 5.76 - Authenticated (Subscribe -
CVE-2026-5415
WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authent -
CVE-2026-5411
WP Captcha PRO <= 5.38 - Missing Authorization to Authentica
Same weakness: CWE-340
-
CVE-2026-85496
Botslab G980H Dashcams Generation of Predictable Numbers or -
CVE-2026-95653
Concrete CMS Community Store before 2.7.8 Predictable Digita -
CVE-2026-64964
Generation of Predictable Email Confirmation Token in ATutor -
CVE-2025-14602
Weak File Name Generation in vsDesk -
CVE-2026-75106
OpnForm Editable Submission Secret Derivation via Empty Hash
V. Comments for CVE-2024-12034
No comments yet