Access violation vulnerability in Getwid – Gutenberg Blocks 2.0.4

The Getwid – Gutenberg Blocks plugin for WordPress has a security vulnerability that allows unauthorized changes to be made to important data. This is because the plugin does not check for the necessary permissions when using the recaptcha_api_key_manage function. This means that someone with an account on the website can potentially make changes to the ‘Recaptcha Site Key’ and ‘Recaptcha Secret Key’ settings, even if they only have subscriber-level access or higher.

Detected in:

Getwid – Gutenberg Blocks fixed vulnerable versions: >= * <= 2.0.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.