cleantalk
Vulnerabilities and Security Researches

Getwid – Gutenberg Blocks, CVE-2023-6963

CVE, Research URL

CVE-2023-6963

Published on
Feb 06, 2024
Research Description
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to bypass the Captcha Verification of the Contact Form block by omitting 'g-recaptcha-response' from the 'data' array.
Affected versions
max 2.0.5.
Status
vulnerable