Legalweb vulnerabilities

Products

• Wp Dsgvo Tools (gdpr) 7
• Wp Dsgvo Tools 2

Newest

• legalweb wp dsgvo tools (gdpr) WP DSGVO Tools (GDPR) < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access Request CVE-2026-11869 5.3 MediumJuly 9, 2026
• legalweb wp dsgvo tools (gdpr) WP DSGVO Tools (GDPR) <= 3.1.39 - Missing Authorization to Unauthenticated Sensitive Personal Data Disclosure via subject-access-request AJAX Endpoint (process_now/is_ajax Parameters) CVE-2026-10034 5.3 MediumJune 19, 2026
• legalweb wp dsgvo tools (gdpr) WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users CVE-2026-4283 9.1 CriticalMarch 24, 2026
• legalweb wp dsgvo tools (gdpr) WP DSGVO Tools (GDPR) <= 3.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode CVE-2026-0914 6.4 MediumJanuary 23, 2026
• legalweb cloud LegalWeb Cloud <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11761 6.4 MediumNovember 28, 2024
• legalweb wp dsgvo tools (gdpr) WP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-3201 6.4 MediumMay 23, 2024
• legalweb wp dsgvo tools (gdpr), wp dsgvo tools +1 more WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site Scripting CVE-2021-4358 7.2 HighJune 7, 2023
• legalweb wp dsgvo tools (gdpr), wp dsgvo tools +1 more WP DSGVO Tools (GDPR) <= 3.1.23 Unauthenticated Arbitrary Post Deletion CVE-2021-42359 7.5 HighNovember 5, 2021