Threats tagged 'ghsa-gjf2-7v5h-4jf9'

The GDPR Framework By Data443 WordPress plugin versions prior to 2.4.0 contains an improper access control vulnerability. This flaw allows unauthenticated attackers to forge cookie-consent records for arbitrary email addresses and to flood the site's privacy-request queue with arbitrary entries. The vulnerability arises from insufficient verification of authorization or the identity of the data subject when recording consent and privacy requests.