CVE-2026-27411

Guessable CAPTCHA vulnerability in jp-secure SiteGuard WP Plugin siteguard allows Functionality Bypass.This issue affects SiteGuard WP Plugin: from n/a through <= 1.7.9.

Scoring

Severity

MEDIUM

CVSS base score

5.4

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

EPSS probability

0.19%

CWE

CWE-804

Published

2026-03-05

Last modified

2026-04-29

Affected products

• jp-secure SiteGuard WP Plugin
• jp-secure SiteGuard WP Plugin

Weakness type

• CWE-804

Related vulnerabilities

• CVE-2024-23566 — HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha...
• CVE-2024-23567 — HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows...
• CVE-2026-13082 — GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets
• CVE-2026-49953 — Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set
• CVE-2026-40935 — WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure
• CVE-2025-10423 — newbee-mall kaptcha mallKaptcha Captcha
• CVE-2025-8546 — atjiu pybbs Verification Code login Captcha
• CVE-2025-40916 — Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text

Markdown version · Browse all CVEs