CVE-2025-1262

MEDIUM 5.3CVE-2025-1262 · Published 25/02/2025 · updated 17/06/2026

In short

CVE-2025-1262 is a MEDIUM (CVSS 5.3) vulnerability affecting advanced google recaptcha (webfactoryltd).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 28.0% of all vulnerabilities.
Fix: update to 1.2.8 or later.

Package	Affected versions	Patched versions
advanced google recaptcha webfactoryltd	`< 1.2.8`	`1.2.8`

Description

The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . This makes it possible for unauthenticated attackers to bypass the Built-in Math Captcha Verification.

References

plugins.trac.wordpress.org/changeset/3244677/advanced-google-recaptcha · Patch
wordfence.com/threat-intel/vulnerabilities/id/d553aab2-d441-46d6-9c01-5dcfdc48674f · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free