46 matches found
WordPress Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates plugin < 3.7.1 - Unauthenticated API Secret Disclosure vulnerability
Unauthenticated API Secret Disclosure vulnerability discovered by Vaibhav Narkhede in WordPress Plugin WPLegalPages versions 3.7.1...
EUVD-2026-65168
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
CVE-2026-78259
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
CVE-2026-78259 WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
CVE-2026-78259
CVE-2026-78259 is an unauthenticated Broken Authentication vulnerability in the WPLegalPages WordPress plugin, affecting versions ≤ 3.7.0 . A remote, unauthenticated attacker can exploit this over the network with low complexity and no user interaction, resulting in low-impact compromises to conf...
CVE-2026-78259 WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HieuPenguinnn in WordPress Plugin WPLegalPages versions = 3.7.0...
CVE-2026-78259: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
PT-2026-81054
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
CVE-2025-67974
Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through = 3.5.4...
CVE-2025-67974
CVE-2025-67974 is a Missing Authorization (Broken Access Control) vulnerability in WordPress plugin WP Legal Pages WPLegalPages, affecting versions up to 3.5.4. The issue arises from incorrectly configured access control security levels, enabling unauthorized access under certain conditions. Repo...
CVE-2025-67974 WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through = 3.5.4...
CVE-2025-67974 WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through = 3.5.4...
CVE-2025-67974: Missing Authorization
Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through = 3.5.4...
WordPress plugin WPLegalPages 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by NumeX in WordPress Plugin WPLegalPages versions = 3.5.4...
CVE-2023-4968
The WPLegalPages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wplegalpage' shortcode in versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
WordPress WP Legal Pages plugin <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect vulnerability
Missing Authorization to Unauthenticated API Disconnect vulnerability discovered by Rafshanzani Suhada in WordPress Plugin WPLegalPages versions = 3.5.1...