van-ons vulnerabilities

Products

• wp-gdpr-compliance 1

Latest van-ons CVEs

Newest publication first

1. CVE-2018-19207 WP GDPR Compliance <= 1.4.2 - Arbitrary Options Update and Action Calling

   Published 2018-11-12

   Critical·CVSS 9.8 EPSS 88.1% Framework module

   The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.