CVE-2018-15876

An issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form, login form, and password-recovery form require solving a CAPTCHA to perform actions. However, this is required only once per user session, and therefore one could send as many requests as one wished by automation.

• CWE-20

• https://github.com/aas-n/CVE/tree/master/ajax-bootmodal-loginThird Party Advisory
• https://github.com/aas-n/CVE/tree/master/ajax-bootmodal-loginThird Party Advisory

Published

Aug 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1587IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6…4.3
• CVE-2018-15870An invalid memory address dereference was discovered in deco…
• CVE-2018-15871An invalid memory address dereference was discovered in deco…
• CVE-2018-15873A SQL Injection issue was discovered in Sentrifugo 3.2 via t…9.8
• CVE-2018-15874Cross-site scripting (XSS) vulnerability on D-Link DIR-615 r…6.1
• CVE-2018-15875Cross-site scripting (XSS) vulnerability on D-Link DIR-615 r…6.1
• CVE-2018-15877The Plainview Activity Monitor plugin before 20180826 for Wo…8.8
• CVE-2018-15878Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-15879Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-1588IBM Jazz Foundation (IBM Rational Engineering Lifecycle Mana…7.1
• CVE-2018-15880An issue was discovered in Joomla! before 3.8.12. Inadequate…
• CVE-2018-15881An issue was discovered in Joomla! before 3.8.12. Inadequate…