Description
WordPress Plugin GDPR Cookie Compliance is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently delete its settings. WordPress Plugin GDPR Cookie Compliance version 4.0.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.0.3 or latest
References
Related Vulnerabilities
phpMyFAQ Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3783)
WordPress Plugin Integration for HubSpot and WooCommerce Cross-Site Scripting (1.0.4)
WordPress Plugin DukaPress Directory Traversal (2.5.2)
WordPress Plugin Eyes Only:User Access Shortcode Cross-Site Scripting (1.8.2)