Input validation vulnerability in DSGVO All in one for WP 3.9

The DSGVO All in One for WP WordPress plugin before version 4.0 had a problem with its dsgvoaio_write_log AJAX action. This problem allowed unauthenticated attackers to gain access to the administrator dashboard without permission. They could do this by using a special type of code (called an XSS payload) to create a false administrator account. This false account would be activated when an administrator looked at the logs.