Dsgvo-for-wp Dsgvo All In One For Wp — known CVE vulnerabilities

Every CVE whose affected-product data names Dsgvo-for-wp Dsgvo All In One For Wp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-13356 — CVSS 6.5 (medium): The DSGVO All in one for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6…
• CVE-2024-43964 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Leithold DSGVO All in…
• CVE-2022-2628 — CVSS 4.8 (medium): The DSGVO All in one for WP WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2024-27967 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Michael Leithold DSGVO All in one for WP.This issue affects DSGVO All in one for WP…