Is Advanced Google Recaptcha safe?

Plugin details

• Slug: advanced-google-recaptcha
• Requires PHP: 5.2+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

• Advanced Google reCAPTCHA [advanced-google-recaptcha] < 1.26 [CVE-2024-12034, Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock, WordPress Advanced Google reCAPTCHA Plugin <= 1.25 is vulnerable to Other Vulnerability Type]
• Advanced Google reCAPTCHA [advanced-google-recaptcha] < 1.28 [CVE-2025-1262, Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass, EUVD-2025-5445]
• Advanced Google reCAPTCHA [advanced-google-recaptcha] < 1.30 [CVE-2025-2074, Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter, EUVD-2025-8556]
• Advanced Google reCAPTCHA [advanced-google-recaptcha] < 5.39 [CVE-2026-5415, WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link, WP Captcha PRO &lt;= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link, EUVD-2026-34888]
• Advanced Google reCAPTCHA [advanced-google-recaptcha] < 5.39 [CVE-2026-5411, WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload, EUVD-2026-34889]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• SiteGuard WP Plugin — 500000+ active installs — max PHP 8.4
• CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 — 300000+ active installs — max PHP 8.4
• Really Simple CAPTCHA — 300000+ active installs — max PHP 8.4
• CleanTalk Anti-Spam. Spam Firewall & Bot protection — 200000+ active installs
• Simple CAPTCHA with Cloudflare Turnstile — 100000+ active installs