CVE-2026-57775: WordPress Simple Cloudflare Turnstile plugin <= 1.44.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Authentication Abuse.This issue affects Simple Cloudflare Turnstile: from n/a through 1.44.1.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
simple-cloudflare-turnstileto a version that resolves this vulnerability.Fixed in 1.44.2
Event History
Frequently Asked Questions
Which installations are affected?
Simple Cloudflare Turnstile versions through 1.44.1 are affected. The provided data does not identify a fixed version.
Can this be exploited remotely without an account or user interaction?
The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the likely impact of exploitation?
The issue is classified as an authentication bypass/authentication abuse vulnerability. The CVSS vector indicates an integrity impact, with no stated confidentiality or availability impact.