{
 "id": "WPSEC-2026-2316",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2316/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2316/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2316/index.md",
 "title": "Simple CAPTCHA with Cloudflare Turnstile <= 1.44.4 - Unauthenticated CAPTCHA Bypass via Sunshine Photo Cart Nonces on WordPress Login and Registration Forms",
 "description": "The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to CAPTCHA Bypass via the Sunshine Photo Cart integration in versions 1.39.0 up to, and including, 1.44.4, due to the integration skipping the WordPress login and registration Turnstile checks whenever a valid Sunshine login, signup or checkout nonce is posted, even though these nonces are printed on public pages for logged-out visitors. This makes it possible for unauthenticated attackers to add such a nonce to a wp-login.php login or registration request and skip the Turnstile challenge, allowing automated password guessing and automated account registration. Exploitation requires Sunshine Photo Cart to be active and the plugin's WordPress login or registration protection to be enabled.",
 "plugin": {
  "slug": "simple-cloudflare-turnstile",
  "name": "Simple CAPTCHA with Cloudflare Turnstile",
  "full_name": "Simple CAPTCHA with Cloudflare Turnstile",
  "wordpress_org": "https://wordpress.org/plugins/simple-cloudflare-turnstile/",
  "advisories_url": "https://wpsec.com/vuln/plugin/simple-cloudflare-turnstile/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/simple-cloudflare-turnstile"
 },
 "type": "AUTHBYPASS",
 "cwe": [
  "CWE-287"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": "1.39.0",
    "from_inclusive": true,
    "to": "1.44.5",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 1.39.0 before 1.44.5"
  ]
 },
 "introduced_in": "1.39.0",
 "fixed_in": "1.44.5",
 "remediation": "Update to 1.44.5 or later.",
 "fix_released": "2026-10-31T18:02:11+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:38:56.340246+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2316/",
  "https://plugins.svn.wordpress.org/simple-cloudflare-turnstile/tags/1.44.5/",
  "https://wordpress.org/plugins/simple-cloudflare-turnstile/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/simple-cloudflare-turnstile",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-03"
 }
}