The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The WP DSGVO Tools (GDPR) WordPress plugin before 3.1.40 does not perform an authorization check on the immediate-processing path of its data subject access request feature, allowing unauthenticated attackers to generate and download the full personal-data export (including name, postal address, phone number, email, and comment content) of any user, customer, or commenter by supplying their email address.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Shapepress Dsgvo Plugin | — | Update shapepress-dsgvo plugin to version 3.1.40, or a newer patched version | Oct 30, 2026 | Jun 18, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub