Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: welaunch Component: Wordpress Gdpr Clear all filters
TI-2024-09619 CVE-2024-10388 · GHSA-gf4p-rrpw-5r59

WordPress GDPR <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 38

The WordPress GDPR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr_firstname' and 'gdpr_lastname' parameters in all versions up to, and including, 2.0.2 due to insufficient input sanitizat…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00321 Published 2024-11-19 No fix listed CWE-79
TI-2024-10257 CVE-2024-11069 · GHSA-hfp8-32jq-c2x9

WordPress GDPR <= 2.0.2 - Missing Authorization to Unauthenticated Arbitrary User Deletion

Priority MEDIUM 46

The WordPress GDPR plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'WordPress_GDPR_Data_Delete::check_action' function in all versions up to, and including, 2.0.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00445 Published 2024-11-19 No fix listed CWE-862