{
 "id": "WPSEC-2026-2315",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2315/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2315/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2315/index.md",
 "title": "Simple CAPTCHA with Cloudflare Turnstile <= 1.44.4 - Unauthenticated CAPTCHA Bypass via Ultimate Member Login Token Reuse",
 "description": "The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to CAPTCHA Bypass via the Ultimate Member login form integration in all versions up to, and including, 1.44.4, due to the plugin storing a verification flag tied to the submitted Turnstile token (for the form, and for the targeted user ID for 300 seconds) before Ultimate Member checks the password, and then accepting that flag instead of verifying the token again. This makes it possible for unauthenticated attackers to solve a single Turnstile challenge and resubmit the same token with any number of password guesses during that window, defeating the brute-force protection. Exploitation requires the plugin's Ultimate Member login protection to be enabled.",
 "plugin": {
  "slug": "simple-cloudflare-turnstile",
  "name": "Simple CAPTCHA with Cloudflare Turnstile",
  "full_name": "Simple CAPTCHA with Cloudflare Turnstile",
  "wordpress_org": "https://wordpress.org/plugins/simple-cloudflare-turnstile/",
  "advisories_url": "https://wpsec.com/vuln/plugin/simple-cloudflare-turnstile/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/simple-cloudflare-turnstile"
 },
 "type": "AUTHBYPASS",
 "cwe": [
  "CWE-307"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": "1.41.1",
    "from_inclusive": true,
    "to": "1.44.5",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 1.41.1 before 1.44.5"
  ]
 },
 "introduced_in": "1.41.1",
 "fixed_in": "1.44.5",
 "remediation": "Update to 1.44.5 or later.",
 "fix_released": "2026-10-31T18:02:11+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:38:56.340246+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2315/",
  "https://plugins.svn.wordpress.org/simple-cloudflare-turnstile/tags/1.44.5/",
  "https://wordpress.org/plugins/simple-cloudflare-turnstile/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/simple-cloudflare-turnstile",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-03"
 }
}