{
 "id": "WPSEC-2026-0950",
 "url": "https://wpsec.com/vuln/WPSEC-2026-0950/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-0950/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-0950/index.md",
 "title": "MailPoet – Newsletters, Email Marketing, and Automation <= 5.41.0 - Unauthenticated CAPTCHA Bypass via Answer Replay on Registration Forms",
 "description": "The MailPoet plugin for WordPress is vulnerable to CAPTCHA Bypass via the built-in CAPTCHA on the WordPress and WooCommerce registration forms in all versions up to, and including, 5.41.0, due to the CAPTCHA session and its phrase not being invalidated after a correct answer is accepted during registration. This makes it possible for unauthenticated attackers to solve one CAPTCHA and reuse the same session ID and answer for any number of registrations until the session expires, which allows automated account registrations when the built-in CAPTCHA is enabled for registration forms.",
 "plugin": {
  "slug": "mailpoet",
  "name": "MailPoet – Newsletters, Email Marketing, and Automation",
  "full_name": "MailPoet – Newsletters, Email Marketing, and Automation",
  "wordpress_org": "https://wordpress.org/plugins/mailpoet/",
  "advisories_url": "https://wpsec.com/vuln/plugin/mailpoet/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/mailpoet"
 },
 "type": "BYPASS",
 "cwe": [
  "CWE-294"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "5.42.0",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 5.42.0"
  ]
 },
 "introduced_in": null,
 "fixed_in": "5.42.0",
 "remediation": "Update to 5.42.0 or later.",
 "fix_released": "2026-10-13T14:24:47+00:00",
 "published": "2026-10-14T14:57:06+00:00",
 "updated": "2026-10-14T12:18:11.887584+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-0950/",
  "https://plugins.svn.wordpress.org/mailpoet/tags/5.42.0/",
  "https://wordpress.org/plugins/mailpoet/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/mailpoet",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-14"
 }
}