CyberRota
← Ana sayfaya dön

CVE-2026-4512

LOW · CVSS 3.5 EPSS %0.01

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-04-23T07:16:41.933 · Çekilme zamanı: 2026-05-23T00:02:36.679155+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-4512
Severity
LOW
CVSS
3.5
EPSS
%0.01
WordPress Java

Orijinal NVD Açıklaması

The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputting it in a JavaScript string context via the grecaptcha_js() function. This allows administrators on multisite installations (who do not have the unfiltered_html capability) to inject arbitrary JavaScript that executes for all visitors to the WordPress login page.