Security Risk Category

gdpr Security Risks

Published vulnerability pages connected to gdpr. One risk can appear in multiple categories while keeping one canonical page.

gdpr risks

Showing 1 of 1 published risks.

medium

WP DSGVO Tools GDPR Personal Data Export Authorization Bypass Vulnerability

The WP DSGVO Tools (GDPR) WordPress plugin before 3.1.40 does not perform an authorization check on the immediate-processing path of its data subject access request feature, allowing unauthenticated attackers to generate and download the full personal-data export (including name, postal address, phone number, email, and comment content) of any user, customer, or commenter by supplying their email address.

CVE-2026-11869wordpresswp-dsgvo-toolsgdprinformation-disclosure

Updated Jul 10, 2026