CVE-2021-4348

Name of the Vulnerable Software and Affected Versions The Ultimate GDPR & CCPA plugin for WordPress versions up to, and including, 2.4

Description The issue allows unauthenticated attackers to import and export settings via the export settings and import settings functions. This enables them to change plugin settings, potentially leading to attacks such as redirecting visitors to malicious sites.

Recommendations For versions up to, and including, 2.4, consider disabling the export settings and import settings functions as a temporary workaround until a patch is available. Restrict access to these functions to minimize the risk of exploitation.