Security Risk Category

wp-dsgvo-tools Security Risks

Published vulnerability pages connected to wp-dsgvo-tools. One risk can appear in multiple categories while keeping one canonical page.

wp-dsgvo-tools risks

Showing 1 of 1 published risks.

medium

WP DSGVO Tools GDPR Personal Data Export Authorization Bypass Vulnerability

The WP DSGVO Tools (GDPR) WordPress plugin before 3.1.40 does not perform an authorization check on the immediate-processing path of its data subject access request feature, allowing unauthenticated attackers to generate and download the full personal-data export (including name, postal address, phone number, email, and comment content) of any user, customer, or commenter by supplying their email address.

CVE-2026-11869wordpresswp-dsgvo-toolsgdprinformation-disclosure

Updated Jul 10, 2026