{"id":"CVE-2026-57775","kind":"vulnerability","aliases":["CVE-2026-57775"],"related":[],"title":"WordPress Simple Cloudflare Turnstile plugin: authentication bypass through an alternate path","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Authentication Abuse.This issue affects Simple Cloudflare Turnstile: from n/a through 1.44.1.","summary":"The Simple Cloudflare Turnstile WordPress plugin, by RelyWP, has an authentication bypass through an alternate path or channel, affecting versions through 1.44.1. An attacker may be able to get past the Turnstile or login check without proper authentication.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","simple-cloudflare-turnstile","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check the installed plugin version in the WordPress admin under Plugins, or in the `simple-cloudflare-turnstile` plugin header, and see whether it is `1.44.1` or older.","fix":"- Simple Cloudflare Turnstile: a fixed version is not stated in the sources; move to a release later than `1.44.1` once the vendor publishes one.","status":"open","published_at":"2026-11-04T08:17:17+00:00","first_seen_at":"2026-11-04T08:26:00+00:00","triaged_at":"2026-11-04T08:26:36+00:00","updated_at":"2026-11-04T08:26:36+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-04T08:26:36Z","model":"claude-haiku-5-5","output":{"fix":"- Simple Cloudflare Turnstile: a fixed version is not stated in the sources; move to a release later than `1.44.1` once the vendor publishes one.","reach":"internet","title":"WordPress Simple Cloudflare Turnstile plugin: authentication bypass through an alternate path","impact":"medium","summary":"The Simple Cloudflare Turnstile WordPress plugin, by RelyWP, has an authentication bypass through an alternate path or channel, affecting versions through 1.44.1. An attacker may be able to get past the Turnstile or login check without proper authentication.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","simple-cloudflare-turnstile"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker bypasses login protection on the WordPress site","analyst_note":"Check the NVD entry and the plugin's changelog for the fixed version and the exact login path affected.","how_to_check":"- Check the installed plugin version in the WordPress admin under Plugins, or in the `simple-cloudflare-turnstile` plugin header, and see whether it is `1.44.1` or older.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running the Simple Cloudflare Turnstile WordPress plugin at version 1.44.1 or older are in scope. The sources do not say which configurations expose the bypass, so the exact conditions are unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000703,"input_tokens":4137,"output_tokens":579,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-57775':14A,17A '1.44.1':45B,91C 'abl':50B 'abuse.this':82C 'affect':42B,84C 'allow':80C 'altern':10A,38B,66C 'attack':47B 'authent':6A,34B,61B,62C,81C 'bypass':7A,35B,63C 'channel':41B,69C 'check':58B 'cloudflar':3A,21B,26B,74C,78C,86C 'cve':12A,15A 'get':52B 'issu':83C 'login':57B 'may':48B 'n/a':89C 'packag':18B 'past':53B 'path':11A,39B,67C 'plugin':5A,29B 'proper':60B 'relywp':31B,72C 'simpl':2A,20B,25B,73C,77C,85C 'simple-cloudflare-turnstil':19B,76C 'turnstil':4A,22B,27B,55B,75C,79C,87C 'use':64C 'version':43B 'vulner':70C 'without':59B 'wordpress':1A,23B,28B","nicknames":[],"mitigations":[],"who_affected":"Sites running the Simple Cloudflare Turnstile WordPress plugin at version 1.44.1 or older are in scope. The sources do not say which configurations expose the bypass, so the exact conditions are unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","package","simplecloudflareturnstile","wordpress"],"campaign_type":null,"first_public_at":"2026-11-04T08:17:17+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-57775","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57775","severity":null,"published_at":"2026-11-04T08:17:17+00:00","modified_at":"2026-11-04T08:17:17+00:00","first_seen_at":"2026-11-04T08:26:00+00:00","fetched_at":"2026-11-04T08:26:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}