plugin
8 known security issues reported for the Legal Pages WordPress plugin. Most recent disclosed Nov 21, 2025.
Running Legal Pages on your site? Check whether your installed version is affected.
Scan your site freeThe Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.4.6. This makes it possible for unauthenticated attackers to perform an unauthor...
The Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpwax_legal_page() function in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, wi...
The Legal Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.2. This is due to missing or incorrect nonce validation on the uninstall_reason_submission function. This makes it possible for unauthenticated attackers to submit an uninstall reason via a forged requ...
The Legal Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the moveToTrash and fetch_and_insert_template_data functions. This makes it possible for unauthenticated attackers to trash posts and insert t...
The Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the moveToTrash() and fetch_and_insert_template_data() functions hooked via AJAX in all versions up to, and including...
The Legal Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteLegalTemplate() function in versions up to, and including, 1.3.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete legal templates.
The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with subscriber-level permissio...
The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to invoke this function inten...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free