CVE-2014-5190: Cross-site scripting (XSS) vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam...

Security readout for executives and security teams

CVE-2014-5190 is a cross-site scripting issue in SI CAPTCHA Anti-Spam 2.7.4 for WordPress. If the vulnerable test PHP file is reachable, an attacker could cause browser-executed script or HTML injection through PATH_INFO. The bundle does not provide CVSS, patch details, or evidence of active exploitation. Exposure is most likely on WordPress sites still running SI CAPTCHA Anti-Spam 2.7.4 with captcha-secureimage/test/index.php publicly reachable. The source bundle does not identify other affected versions or products. Treat as a legacy web exposure cleanup item, not an emergency based on the supplied evidence. Prioritize externally reachable WordPress sites because XSS can support phishing, session abuse, or content manipulation in user browsers. Mitigation focus: Inventory WordPress sites for SI CAPTCHA Anti-Spam version 2.7.4.; Check current vendor or plugin repository guidance for a fixed version.; Upgrade, replace, or remove the plugin according to vendor-supported guidance..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.