CVE-2025-30584
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 24, 2025
Updated: Mar 27, 2025
CWE ID 352
Summary
CVE-2025-30584 is a Cross-Site Request Forgery (CSRF) vulnerability affecting AlphaOmega Captcha & Anti-Spam Filter. An attacker can exploit this issue to inject Stored Cross-Site Scripting (XSS) code. This vulnerability was identified in AlphaOmega Captcha & Anti-Spam Filter versions from n/a to 3.3. Successful exploitation could lead to unintended execution of malicious scripts in a user's web browser, posing a significant security risk. It is highly recommended that users upgrade to the latest version of the software to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress