Read the docs

mlfactory

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

mlfactory records in CISA KEV

No mlfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dsgvo All In One For Wp 1 record LOW

Records

6 records

TI-2026-03046 CVE-2026-3535 · GHSA-x9xw-x29g-m332

DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter

Priority MEDIUM 51

The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the `DSGVOGWPdownloadGoogleFonts()` function in all versions up to, and including, 1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00936 Published 2026-04-08 No fix listed CWE-434
TI-2026-82279 CVE-2026-96741 · GHSA-p2v7-9w2f-7fc4

Stored cross-site scripting in DSGVO All in one for WP via comments

Priority LOW 31

The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption in all versions up to, and including, 5.0 due to insufficient input san…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00236 Published 2026-10-29 No fix listed CWE-79
TI-2021-06586 CVE-2021-24294 · GHSA-7mr4-xp7p-pcmc

DSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)

Priority LOW 30

The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01186 Published 2021-05-24 Fixed in 4.0 CWE-79
Open these records in search →