CVE-2026-57775

WordPress Simple Cloudflare Turnstile plugin <= 1.44.1 - Broken Authentication vulnerability

State: published CNA: Patchstack CVSS 3.1 5.3 Medium NVD: deferred

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Authentication Abuse.This issue affects Simple Cloudflare Turnstile: from n/a through 1.44.1.

Affected products

Vendor	Product	Versions
RelyWP	Simple Cloudflare Turnstile	≤1.44.1

References

External links from the record. They lead to third-party sites.

https://patchstack.com/database/wordpress/plugin/simple-cloudflare-turnstile/vulnerability/wordpress-simple-cloudflare-t… vdb-entry

Dates

Reserved: 2026-06-25
Published: 2026-11-04
Updated: 2026-11-04

CVSS

5.3 Medium

Version: 3.1
Source: CNA (Patchstack)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

No EPSS score.

Weakness

CWE-288 Authentication Bypass Using an Alternate Path or Channel

NVD

Status: Deferred
Published: 2026-11-04
Modified: 2026-11-04

5.3 Medium CVSS 3.1 · Patchstack, secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

This CVE at nvd.nist.gov