Read the docs

Van-ons

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Van-ons records in CISA KEV

No Van-ons vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Wp-gdpr-compliance · all components

Priority HIGH 84

The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in Novemb…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.88065 Published 2018-11-12 No fix listed CWE-425
Open these records in search →