VulnSocial

CVE-2026-5415Disclosure

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajax_run_tool() AJAX handler relying solely on a nonce check (check_ajax_referer) for security without performing any capability check, combined with the create_temporary_link tool allowing the generation of passwordless login links for arbitrary users, and the handle_temporary_links() function authenticating visitors via these links without any additional authorization validation. The required nonce is exposed to all authenticated backend users (including Subscribers) via wp_localize_script() on all non-settings admin pages when the plugin's welcome pointer has not been dismissed. This makes it possible for authenticated attackers, with Subscriber-level access and above, to bypass normal authentication and log in as any user, including Administrators, resulting in complete account takeover.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-288

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 3 mentions (2026-06-06); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-06: 3Mentions · 2026-06-13: 1PoC Mentioned / Linked · 2026-06-13: 1Technical Details · 2026-06-06: 3Technical Details · 2026-06-13: 106-0606-13
Signal classification2 categories
Disclosure
375.0%
PoC
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-063
Disclosure3
2026-06-131
PoC1
Full discourse4 posts
  • Atomic Edge@atomicedgeWAF
    PoC

    https://atomicedge.io/cve-proof/cve-2026-5415-advanced-google-recaptcha-version-5-38-high-vulnerability-proof-of-concept CVE-2026-5415 advanced-google-recaptcha (CVSS Score 8.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wps…

    Post summary

    The post announces a Proof of Concept for CVE‑2026‑5415, an advanced Google reCAPTCHA vulnerability with a CVSS score of 8.8, providing technical details and a link to the PoC but no evidence of active exploitation or a patch.

    0000034
    9 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5415 The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in… https://www.cve.org/CVERecord?id=CVE-2026-5415 ----- Traducción: CVE-2026-5415 El … http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-5415, indicating an authentication bypass vulnerability in the WP Captcha PRO WordPress plugin, without providing patches, exploit code, or evidence of active exploitation.

    0000036
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5415 The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in… https://www.cve.org/CVERecord?id=CVE-2026-5415

    Post summary

    The WP Captcha PRO WordPress plugin is vulnerable to an authentication bypass as described in CVE-2026-5415.

    00000183
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-5415 Authentication Bypass in WP Captcha PRO Plugin Versions Up to 5.38 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5415

    Post summary

    A new authentication bypass vulnerability (CVE‑2026‑5415) has been disclosed affecting WP Captcha PRO Plugin versions up to 5.38.

    0000040
    4.0K followersView on X

Explore more

Back to dashboard