Read the docs

is-human WordPress Plugin

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

is-human WordPress Plugin records in CISA KEV

No is-human WordPress Plugin vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2011-04635 CVE-2011-10033 · GHSA-xmcg-3p5m-pg58

WordPress Plugin is-human <= v1.4.2 Eval Injection RCE

Priority HIGH 81

The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00478 Published 2025-10-15 No fix listed CWE-95
Open these records in search →