WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting

WordPress Cookie Information/Free GDPR Consent Solution plugin prior to 2.0.8 contains a cross-site scripting vulnerability via the admin dashboard. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option

The WP GDPR Compliance plugin allows unauthenticated users to execute any action and update any database value. This vulnerability is due to the lack of proper validation in the Includes/Ajax.php file. id: CVE-2018-19207 info: name: WP GDPR Compliance 1.4.3 - Unauthenticated Call Any Action or...

EUVD-2024-31394

Malicious code in bioql PyPI...

CVE-2024-33682

Cross-Site Request Forgery CSRF vulnerability in Cookie Information A/S WP GDPR Compliance.This issue affects WP GDPR Compliance: from n/a through 2.0.23...

CVE-2024-33682

Cross-Site Request Forgery CSRF vulnerability in Cookie Information A/S WP GDPR Compliance.This issue affects WP GDPR Compliance: from n/a through 2.0.23...

CVE-2024-33682

Technical details for CVE-2024-33682 are not provided in the connected documents. Information such as affected versions, exploit vectors, impact, or fixes is not publicly disclosed here. Monitor for updates from official advisories and trusted vulnerability databases.

PT-2024-25438

Name of the Vulnerable Software and Affected Versions WP GDPR Compliance versions 2.0.23 and earlier Description A Cross-Site Request Forgery CSRF issue affects the WP GDPR Compliance plugin. This type of issue allows an attacker to trick a user into performing unintended actions on a web...

CVE-2024-33682: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Cookie Information A/S WP GDPR Compliance.This issue affects WP GDPR Compliance: from n/a through 2.0.23...

WordPress WP GDPR Compliance Plugin <= 2.0.22 is vulnerable to Broken Access Control

Software WP GDPR Compliance Type Plugin Vulnerable versions = 2.0.22 Fixed in 2.0.23 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-6700 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 6a981b3b2d5a Credits Lucio Sá Required...

CVE-2018-19207

The Van Ons WP GDPR Compliance (wp-gdpr-compliance) plugin for WordPress, prior to version 1.4.3 , is vulnerable to remote code execution and privilege escalation . The root cause is a failure to properly sanitize user-supplied input for the $wpdb-&gt;prepare() function and a lack of proper valid...

CVE-2018-19207: Direct Request

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

PT-2018-14863

Name of the Vulnerable Software and Affected Versions Van Ons WP GDPR Compliance plugin versions prior to 1.4.3 Description The issue allows remote attackers to execute arbitrary code due to mishandled input in $wpdb-prepare. This has been exploited in the wild. Recommendations For versions prior...