Legalweb

7 CVEs across 3 Legalweb products. Browse Legalweb vulnerabilities, severities, and proof-of-concept exploits.

Legalweb products with known CVEs

ProductCVEs
Wp Dsgvo Tools (Gdpr)6
Wp Dsgvo Tools2
Legalweb Cloud1
Legalweb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-10034Medium5.32026-06-19The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.39. This is due to the plugin no…
CVE-2026-4283Critical9.12026-03-24The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38. This is due to t…
CVE-2026-0914Medium6.42026-01-23The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lw_content_block' shortcode in all versions up to…
CVE-2024-11761Medium6.42024-11-28The LegalWeb Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'legalweb-popup' shortcode in all versions up to, and inc…
CVE-2024-3201Medium6.42024-05-23The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pp_link' shortcode in all versions up to, and inc…
CVE-2021-4358High7.22023-06-07The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to, and including, 3.1.23 d…
CVE-2021-42359High7.52021-11-05WP DSGVO Tools (GDPR) <= 3.1.23 had an AJAX action, ‘admin-dismiss-unsubscribe‘, which lacked a capability check and a nonce check and was available to unauthe…