PT-2026-27328

🗓️ 24 Mar 2026 00:00:00Reported by Positive TechnologiesType

Unauthenticated AJAX process now in WordPress DSGVO Tools enables irreversible destruction and anonymization of non-admin accounts.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-4283	24 Mar 202604:27	–	attackerkb
Circl	CVE-2026-4283	24 Mar 202605:26	–	circl
CNNVD	WordPress plugin WP DSGVO Tools (GDPR) 安全漏洞	24 Mar 202600:00	–	cnnvd
CVE	CVE-2026-4283	24 Mar 202604:27	–	cve
Cvelist	CVE-2026-4283 WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users	24 Mar 202604:27	–	cvelist
EUVD	EUVD-2026-14735	24 Mar 202606:31	–	euvd
NVD	CVE-2026-4283	24 Mar 202605:16	–	nvd
Patchstack	WordPress WP DSGVO Tools (GDPR) plugin <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users vulnerability	25 Mar 202608:26	–	patchstack
RedhatCVE	CVE-2026-4283	26 Mar 202614:58	–	redhatcve
Vulnrichment	CVE-2026-4283 WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users	24 Mar 202604:27	–	vulnrichment

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/shapepress-dsgvo/tags/3.1.38/includes/models/unsubscriber.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/21389122-cb39-45d1-a889-b830d3a55603
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-4283
plugins	www.plugins.trac.wordpress.org/browser/shapepress-dsgvo/tags/3.1.38/public/shortcodes/super-unsubscribe/unsubscribe-form-action.php
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/shapepress-dsgvo/tags/3.1.38/includes/class-sp-dsgvo-ajax-action.php
plugins	www.plugins.trac.wordpress.org/browser/shapepress-dsgvo/tags/3.1.38/includes/class-sp-dsgvo-data-collecter.php
plugins	www.plugins.trac.wordpress.org/browser/shapepress-dsgvo/trunk/public/shortcodes/super-unsubscribe/unsubscribe-form-action.php

24 Mar 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.1

EPSS0.00204