PT-2026-56773

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvo reset policy service func function lacking both capability checks and nonce verification while processing user-supplied parameters to reset...