TI-2026-55073 CVE-2026-79324 · GHSA-45ww-vjr4-j928
Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2…
Priority MEDIUM 40
Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase al…