VYPR
Medium severity4.3NVD Advisory· Published Feb 5, 2024· Updated Apr 8, 2026

CVE-2023-6959

CVE-2023-6959

Description

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptcha_api_key_manage function in all versions up to, and including, 2.0.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete the 'Recaptcha Site Key' and 'Recaptcha Secret Key' settings.

Affected products

1
  • cpe:2.3:a:motopress:getwid:*:*:*:*:*:wordpress:*:*
    Range: <2.0.5

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.