CVE-2023-6959

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptchaapikeymanage function in all versions up to, and including, 2.0.3. This makes it possible for authenticated attackers, with subscriber-level acce...

CVE-2023-6959

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptchaapikeymanage function in all versions up to, and including, 2.0.3. This makes it possible for authenticated attackers, with subscriber-level acce...

CVE-2023-6959

CVE-2023-6959 affects the WordPress plugin Getwid – Gutenberg Blocks. The issue is a missing capability check in the recaptcha_api_key_manage function, enabling unauthorized modification of Recaptcha Site Key and Recaptcha Secret Key by authenticated users with subscriber-level access or higher. ...

WordPress Getwid – Gutenberg Blocks Plugin <= 2.0.4 is vulnerable to Broken Access Control

Software Getwid – Gutenberg Blocks Type Plugin Vulnerable versions = 2.0.4 Fixed in 2.0.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-6959 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 64423091eee3 Credits Lucio Sá Required...