Advisories · Technology
mlfactory DSGVO All in one for WP.
Every CVE that names mlfactory DSGVO All in one for WP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption
- mlfactory DSGVO All in one for WP
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
- mlfactory DSGVO All in one for WP
- Broken access control
- CVSS 6.5 Medium
DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion
- mlfactory DSGVO All in one for WP
- Cross-site request forgery (CSRF)