plugin
8 known security issues reported for the Wp Gdpr Core WordPress plugin. Most recent disclosed Jun 7, 2023.
Running Wp Gdpr Core on your site? Check whether your installed version is affected.
Scan your site free[en] The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment and modify the plugin’s settings.
[en] controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment and modify the plugin’s settings.
Controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by NinTechNet in WordPress WP GDPR plugin (versions <= 2.1.1).
Unauthenticated Content Spoofing vulnerability discovered by NinTechNet in WordPress WP GDPR plugin (versions <= 2.1.1).
Unauthenticated Arbitrary Comment Deletion vulnerability discovered by NinTechNet in WordPress WP GDPR plugin (versions <= 2.1.1).
Unauthenticated Plugin Settings Update vulnerability discovered by NinTechNet in WordPress WP GDPR plugin (versions <= 2.1.1).
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free