CVE-2026-91010 | Invisible Anti-Spam & CAPTCHA Plugin up to 5.1.0 on WordPress Message Deletion nonce authorization

A vulnerability has been found in Invisible Anti-Spam & CAPTCHA Plugin up to 5.1.0 on WordPress and classified as critical. The impacted element is an unknown function of the component Message Deletion. The manipulation of the argument nonce leads to missing authorization.

This vulnerability is referenced as CVE-2026-91010. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More