Vulnerabilities (CVE)

Filtered by vendor Appsaloon Subscribe
Filtered by product Wp Gdpr
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-36697 1 Appsaloon 1 Wp Gdpr 2023-12-10 N/A 6.5 MEDIUM
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment and modify the plugin’s settings.