CVE-2026-39741: WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The reported vector indicates network-based exploitation with low attack complexity. No privileges or user interaction are required.

Q: Which installations are within the reported affected range?

Simple Cloudflare Turnstile versions through 1.44.0 are reported as affected. The available data does not identify a fixed version.

Q: What is the reported security impact?

The severity data reports a low integrity impact, with no reported confidentiality or availability impact.

Published Oct 29, 2026

Updated

Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Cloudflare Turnstile: from n/a through 1.44.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Simple Cloudflare Turnstile to a version that resolves this vulnerability.
Fixed in 1.44.1

Event History

Oct 29, 2026

CVE Published

via MITRE·01:06 PM

Data Sourced

via MITRE·01:06 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The reported vector indicates network-based exploitation with low attack complexity. No privileges or user interaction are required.

Which installations are within the reported affected range?

Simple Cloudflare Turnstile versions through 1.44.0 are reported as affected. The available data does not identify a fixed version.

What is the reported security impact?

The severity data reports a low integrity impact, with no reported confidentiality or availability impact.

CVE-2026-39741: WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which installations are within the reported affected range?

What is the reported security impact?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which installations are within the reported affected range?

What is the reported security impact?