CVE-2020-36697

CVE-2020-36697 affects the WP GDPR plugin for WordPress, with vulnerability in versions up to 2.1.1 due to a missing capability check that enables authorization bypass. This allows unauthenticated attackers to delete comments and modify plugin settings. Remediation: upgrade to a version higher th...