Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: welaunch Component: Wordpress Gdpr&ccpa Clear all filters
TI-2022-00157 CVE-2022-0220 · GHSA-7c99-6mgq-969f

WordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site Scripting

Priority LOW 32

The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0232 Published 2022-02-01 Fixed in 1.9.27 CWE-116
TI-2021-07096 CVE-2021-24814 · GHSA-46pp-qwvm-gq6q

WordPress GDPR & CCPA < 1.9.26 - Authenticated Reflected Cross-Site Scripting

Priority MEDIUM 45

The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.26, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02085 Published 2022-02-01 No fix listed CWE-79