CVE-2022-2913

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published
Sep 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-291309.8Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2022-291318.8Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2022-291327.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-291338.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-291346.5Windows Clustered Shared Volume Information Disclosure VulnerabilityCVE-2022-291357.0Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityCVE-2022-291378.8Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2022-291387.0Windows Clustered Shared Volume Elevation of Privilege VulnerabilityCVE-2022-291398.8Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2022-291405.5Windows Print Spooler Information Disclosure VulnerabilityCVE-2022-291418.8Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2022-291427.0Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-2913: Medium severity, CVSS 4.3 | Vulnix