mlfactory vulnerabilities and threats

The DSGVO All in one for WP WordPress plugin up to version 5.0 contains a stored cross-site scripting (XSS) vulnerability. This flaw arises from insufficient input sanitization and output escaping in comment content when certain plugin options are enabled. Specifically, exploitation requires the administrator to have enabled both the 'Google Tag Manager' integration and the 'Replace integration automatically [Beta]' option, and the malicious comment must be approved by an administrator. Successful exploitation allows unauthenticated attackers to inject arbitrary scripts that execute in users' browsers when they visit the affected pages.

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvo_reset_policy_service_func() function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin options. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset all customized privacy policy content including cookie notices, Google Analytics policies, Facebook policies, and YouTube policies to their default values.

The DSGVO Google Web Fonts GDPR WordPress plugin (versions up to 1.1) contains an arbitrary file upload vulnerability due to missing file type validation in a function exposed via an unauthenticated AJAX hook. This allows attackers to upload malicious files, including PHP webshells, potentially leading to remote code execution. Exploitation requires the site to be using one of several specific WordPress themes. No official patch or remediation guidance is currently available.

The DSGVO All in one for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6. This is due to missing or incorrect nonce validation in the user_remove_form.php file. This makes it possible for unauthenticated attackers to delete admin user accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.