Tag

Account-Destruction

1 brief RSS

WP DSGVO Tools (GDPR) Plugin Vulnerable to Account Destruction (CVE-2026-4283)

The WP DSGVO Tools (GDPR) WordPress plugin before version 3.1.39 is vulnerable to unauthenticated account destruction via the `super-unsubscribe` AJAX action, allowing attackers to irreversibly anonymize non-administrator user accounts.

WP DSGVO Tools wordpress gdpr account-destruction cve-2026-4283

2r 1t 1i Jan 2, 2024