← Back

Wp Gdpr

wp-gdpr

Vendor: Appsaloon • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36697
1Appsaloon
1Wp Gdpr
Jun 17, 2026
Jun 7, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment...Show more
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment and modify the plugin’s settings.Show less
CVE-2020-20628
1Appsaloon
1Wp Gdpr
Jun 17, 2026
Aug 31, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS.