CVE-2023-6963: Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to bypass the Captcha Verification of the Contact Form block by omitting 'g-recaptcha-response' from the 'data' array.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6963?
CVE-2023-6963 is classified as a high severity vulnerability due to its potential for unauthorized access.
How do I fix CVE-2023-6963?
To remediate CVE-2023-6963, update the Getwid – Gutenberg Blocks plugin to version 2.0.5 or later.
Who is affected by CVE-2023-6963?
CVE-2023-6963 affects users of the Getwid – Gutenberg Blocks plugin for WordPress versions up to and including 2.0.4.
What type of attack is enabled by CVE-2023-6963?
CVE-2023-6963 allows unauthenticated attackers to bypass CAPTCHA verification on the Contact Form block.
Is CVE-2023-6963 easy to exploit?
Yes, CVE-2023-6963 can be exploited relatively easily by omitting the 'g-recaptcha-response' from the data array.