Getwid Gutenberg Blocks Missing Authorization Vulnerability in WordPress

A vulnerability exists in the Getwid – Gutenberg Blocks plugin for WordPress, affecting all versions through 2.0.3. The issue arises from a lack of proper capability checks in the recaptcha_api_key_manage function, allowing authenticated attackers with subscriber-level access or higher to unauthorizedly add, modify, or delete 'Recaptcha Site Key' and 'Recaptcha Secret Key' settings.

Impact

Exploitation of this vulnerability allows for unauthorized modification of reCAPTCHA API key settings, potentially leading to improper validation of user interactions or automated bot management.

Remediation

Users are advised to update the Getwid – Gutenberg Blocks plugin to version 2.0.5 or later.