PT-2026-67647 · Data443 · Gdpr Framework

Pedro Pinho

·

CVE-2026-14816

·

Published

2026-08-04

·

Updated

2026-08-04

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions The GDPR Framework By Data443 WordPress plugin versions prior to 2.4.0
Description The plugin fails to properly verify authorization or the identity of the data subject when recording privacy requests and cookie-consent choices. This allows unauthenticated attackers to forge consent records for arbitrary email addresses and flood the site's privacy-request queue with arbitrary entries.
Recommendations Update the plugin to version 2.4.0 or later.

Exploit

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-14816

Affected Products

Gdpr Framework