PatchTheCVErecaptcha jetpack vulnerabilities and fixes
Recent CVEs affecting recaptcha jetpack, with upgrade or downgrade steps. 2 tracked.
Also searched as: recaptchajetpack.
recaptcha jetpack has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-05-14. Highest priority: CVE-2024-3940 (score 44/100).
- CVE-2024-3941 MEDIUM 4.7 UPGRADE The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in some places, and is missing s
- CVE-2024-3940 HIGH 8.8 UPGRADE The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its setti
FAQ
How do I fix recaptcha jetpack vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is recaptcha jetpack being exploited right now?
None of the tracked recaptcha jetpack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which recaptcha jetpack CVE should I patch first?
CVE-2024-3940 currently ranks highest (44/100): The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its setti.