ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-36697”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-36697
Published
2023-06-07
CVSS:
7.3
ShadowTrackr CVSS:
2.9
Summary:
The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment and modify the plugin’s settings.