The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.
https://wordpress.org/plugins/captcha/changelog/
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-9108