Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Appsaloon records in CISA KEVNo Appsaloon vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 40
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00851 · Published 2023-06-07 · No fix listed CWE-862
Priority LOW 29
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00936 · Published 2020-08-31 · No fix listed CWE-79
Open these records in search →