Legalweb Wp Dsgvo Tools — known CVE vulnerabilities

Every CVE whose affected-product data names Legalweb Wp Dsgvo Tools, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-42359 — CVSS 7.5 (high): WP DSGVO Tools (GDPR) <= 3.1.23 had an AJAX action, ‘admin-dismiss-unsubscribe‘, which lacked a capability check and a nonce check and…
• CVE-2021-4358 — CVSS 7.2 (high): The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to, and…