Input validation vulnerability in Simple Cloudflare Turnstile – CAPTCHA Alternative 1.23.1

The Simple Cloudflare Turnstile plugin for WordPress has a security vulnerability. If you have version 1.23.1 or lower installed, someone with contributor-level or higher permissions could inject malicious web scripts into pages on your website. If someone visits these pages, the malicious scripts will run. This could be used to harm your website or visitors to it.

Detected in:

Simple Cloudflare Turnstile – CAPTCHA Alternative fixed vulnerable versions: >= * <= 1.23.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.