The Getwid – Gutenberg Blocks plugin for WordPress has a security issue that could allow unauthorized changes to be made to data. This is because there is no check to make sure a user has the proper permissions when using the mailchimp_api_key_manage function. This means that someone who is logged in and has at least Contributor-level access could potentially change the MailChimp API key.