CVE-2020-36697 — WP GDPR <= 2.1.1 - Missing Authorization Checks
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unau…
Published: 2023-06-07 · CVSS: 7.3 · CVSS 3.1
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment and modify the plugin’s settings.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7