CVE-2024-12034

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts

• CWE-340

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3208704%40advanced-google-recaptcha&new=3208704%40advanced-google-recaptcha&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0fa7e6f6-92b2-494b-8c7a-76ba8213b610?source=cve

Published

Dec 24, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12029A remote code execution vulnerability exists in invoke-ai/in…9.8
• CVE-2024-1203The Conversios – Google Analytics 4 (GA4), Meta Pixel & more…8.8
• CVE-2024-12030The MDTF – Meta Data and Taxonomies Filter plugin for WordPr…6.5
• CVE-2024-12031The Advanced Floating Content plugin for WordPress is vulner…6.5
• CVE-2024-12032The Tourfic – Ultimate Hotel Booking, Travel Booking & Apart…6.5
• CVE-2024-12033The Jupiter X Core plugin for WordPress is vulnerable to una…4.3
• CVE-2024-12035The CS Framework plugin for WordPress is vulnerable to arbit…8.8
• CVE-2024-12036The CS Framework plugin for WordPress is vulnerable to Arbit…7.5
• CVE-2024-12037The Post Form – Registration Form – Profile Form for User Pr…6.4
• CVE-2024-12038The Post Form – Registration Form – Profile Form for User Pr…5.4
• CVE-2024-12039langgenius/dify version v0.10.1 contains a vulnerability whe…8.1
• CVE-2024-1204The Meta Box WordPress plugin before 5.9.4 does not prevent…4.3