A vulnerability labeled as problematic has been found in ZT Captcha Plugin up to 1.0.4 on WordPress. The affected element is the function
save_ztcpt_captcha_settings of the component Setting Handler. The manipulation results in cross-site request forgery.
This vulnerability is cataloged as CVE-2026-1075. The attack may be launched remotely. There is no exploit available.
