The GDPR-Extensions-com – Consent Manager plugin for WordPress has a security issue that allows unauthorized individuals to upload harmful code through SVG files. This can happen in all versions of the plugin, including the latest one. As a result, attackers with certain levels of access can inject their own code into web pages, which can harm users who view the SVG file.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
