WordPress Van Ons WP GDPR Compliance Plugin Elevation of Privilege Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Van Ons WP GDPR Compliance plugin is a data collection plugin used in ... An elevation of privilege vulnerability...

CVE-2018-19207

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

CVE-2018-19207

The Van Ons WP GDPR Compliance (wp-gdpr-compliance) plugin for WordPress, prior to version 1.4.3 , is vulnerable to remote code execution and privilege escalation . The root cause is a failure to properly sanitize user-supplied input for the $wpdb->prepare() function and a lack of proper valid...

CVE-2018-19207

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

CVE-2018-19207: Direct Request

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

VulnCheck KEV: CVE-2018-19207

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

PT-2018-14863

Name of the Vulnerable Software and Affected Versions Van Ons WP GDPR Compliance plugin versions prior to 1.4.3 Description The issue allows remote attackers to execute arbitrary code due to mishandled input in $wpdb-prepare. This has been exploited in the wild. Recommendations For versions prior...