Access violation vulnerability in Getwid – Gutenberg Blocks 1.8.3

The Getwid – Gutenberg Blocks plugin for WordPress has a vulnerability that could allow an attacker to make unauthorized changes to data. This vulnerability affects versions up to 1.8.3 of the plugin and is caused by an inadequate capability check on the get_remote_templates function. An attacker with subscriber-level or higher permissions could flush the remote template cache. Although the information in the cache can be accessed through the same endpoint, it is not considered to be sensitive information as it is publicly available on the developer’s website.

Detected in:

Getwid – Gutenberg Blocks fixed vulnerable versions: >= * <= 1.8.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.