Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an automated script is able to solve this anti-spam mechanism trivially and publish spam comments. The details of captcha challenge are exposed within document body of articles with comments & anti spam-captcha functionalities enabled, including "capcha-letter", "capcha-word" and "capcha-token" which can be used to construct a valid post request to publish a comment. As such, attackers can flood articles with automated spam comments, especially if there are no other web defenses available.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-70129 If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically reco… https://www.cve.org/CVERecord?id=CVE-2025-70129
Post summary
The message announces CVE‑2025‑70129, indicating that the anti‑spam captcha in PluXml versions 5.8.22 and earlier can be automatically cracked, thus revealing a bypass vulnerability.
🚨*CVE* CVE-2025-70129 If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically reco… https://www.cve.org/CVERecord?id=CVE-2025-70129 ----- Traducción: CVE-2025-70129 Si … http://infoflow.cloud`
Post summary
A brief tweet cites CVE‑2025‑70129 and notes a captcha flaw, but provides no proof‑of‑concept, exploit code, patch information, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pluxml | pluxml | - | - | - |