CVE-2014-9283 : The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attacker

The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.

Published 2015-03-03 11:59:01

Updated 2015-03-03 17:47:37

Source JPCERT/CC

View at NVD, CVE.org

Products affected by CVE-2014-9283

Bestwebsoft » Captcha » For Wordpress
Versions up to, including, (<=) 4.0.6
cpe:2.3:a:bestwebsoft:captcha:*:*:*:*:*:wordpress:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2014-9283

EPSS FAQ

0.32%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 67 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-9283

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2014-9283

http://jvn.jp/en/jp/JVN93727681/index.html

JVN#93727681: BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass
Vendor Advisory
https://wordpress.org/plugins/captcha/changelog/

Captcha – WordPress plugin | WordPress.org
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000029

JVNDB-2015-000029 - JVN iPedia - 脆弱性対策情報データベース
Vendor Advisory

Jump to

Vulnerability Details : CVE-2014-9283

Products affected by CVE-2014-9283

Exploit prediction scoring system (EPSS) score for CVE-2014-9283

CVSS scores for CVE-2014-9283

References for CVE-2014-9283