Plugin icon

WP DSGVO Tools (GDPR)

shapepress-dsgvo

Vulnerabilities:

8

Last Updated:

June 16, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-06-18
Title
WP DSGVO Tools (GDPR) < 3.1.40 - Missing Authorization to Unauthenticated Sensitive Personal Data Disclosure via subject-access-request AJAX Endpoint (process_now/is_ajax Parameters)
Fixed in
Fixed in 3.1.40
CVSS
5.3 (medium)
Published
2026-06-18
Title
WP DSGVO Tools (GDPR) < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access Request
Fixed in
Fixed in 3.1.40
CVSS
7.5 (high)
Published
2026-03-23
Title
WP DSGVO Tools (GDPR) < 3.1.39 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users
Fixed in
Fixed in 3.1.39
CVSS
9.1 (critical)
Published
2026-01-22
Title
WP DSGVO Tools (GDPR) < 3.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode
Fixed in
Fixed in 3.1.37
CVSS
6.4 (medium)
Published
2024-05-22
Title
WP DSGVO Tools (GDPR) < 3.1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.1.33
CVSS
6.4 (medium)
Published
2021-11-02
Title
WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Arbitrary Post Deletion
Fixed in
Fixed in 3.1.24
CVSS
7.5 (high)
Published
2021-09-24
Title
WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Plugin's Settings Update to Stored Cross-Site Scripting
Fixed in
Fixed in 3.1.24
CVSS
7.2 (high)
Published
2019-08-27
Title
Shapepress DSGVO < 2.2.19 - Authenticated Reflected XSS
Fixed in
Fixed in 2.2.19
CVSS
5.4 (medium)