Skip to main content

WordPress CAPTCHA Plugin Backdoor

A backdoor has been discovered in the WordPress plugin "Captcha free plugin", by BestWebSoft. BestWebSoft has recently sold the plugin to an undisclosed buyer, who then updated the plugin with a backdoor. This backdoor granted the plugin's new author administrative privileges to the website without any authentication.

Threat ID:
CC-1899
Category:
Threat Severity:
Medium
Threat Vector:
Published:
4 January 2018 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

This content has been archived

This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk

Summary

A backdoor has been discovered in the WordPress plugin "Captcha free plugin", by BestWebSoft. BestWebSoft has recently sold the plugin to an undisclosed buyer, who then updated the plugin with a backdoor. This backdoor granted the plugin's new author administrative privileges to the website without any authentication.

Threat details

Remediation steps

Type Step
  • Replace their plugin with the latest official Captcha version 4.4.5
  • Only use WordPress approved plugins
  • All operating systems, antivirus and other security products are kept up to date.
  • Network, proxy and firewall logs should be monitored for suspicious activity.

Last edited: 23 November 2023 11:41 am