Medium severity5.3NVD Advisory· Published Feb 5, 2024· Updated Apr 8, 2026

CVE-2023-6963

Description

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to bypass the Captcha Verification of the Contact Form block by omitting 'g-recaptcha-response' from the 'data' array.

Affected products

Motopress/Getwid
cpe:2.3:a:motopress:getwid:*:*:*:*:*:wordpress:*:*
Range: <2.0.5
WordPress/Getwidllm-fuzzy
Range: <=2.0.4
Package: https://wordpress.org/plugins/getwid

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3022982nvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/d317f2c7-06f3-4875-9f9b-eb7f450aa2f4nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000