WP DSGVO Tools (GDPR)

Information

Software Type	Plugin
Software Slug	shapepress-dsgvo (view on wordpress.org)
Software Status	Active
Software Author	legalweb
Software Website	legalweb.io
Software Downloads	1,111,610
Software Active Installs	10,000
Software Record Last Updated	July 16, 2026

7 Vulnerabilities

Submit a Vulnerability

WP DSGVO Tools (GDPR) <= 3.1.39 - Missing Authorization to Unauthenticated Sensitive Personal Data Disclosure via subject-access-request AJAX Endpoint (process_now/is_ajax Parameters)

5.3

CVE-2026-10034

Jun 18, 2026

Researcher: kalomba

WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users

9.1

CVE-2026-4283

Mar 23, 2026

Researcher: shark3y

WP DSGVO Tools (GDPR) <= 3.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode

6.4

CVE-2026-0914

Jan 22, 2026

Researcher: Muhammad Yudha - DJ

WP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

6.4

CVE-2024-3201

May 22, 2024

Researcher: Krzysztof Zając

WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site Scripting

7.2

CVE-2021-4358

Sep 24, 2021

Researcher: Jerome Bruandet

WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion

7.5

CVE-2021-42359

Sep 21, 2021

Researcher: Ram

WP DSGVO Tools (GDPR) <= 2.2.18 - Cross-Site Scripting

5.4

CVE-2019-15777

Aug 27, 2019

Researchers:

Title	Status	CVE ID	CVSS	Researchers	Date
WP DSGVO Tools (GDPR) <= 3.1.39 - Missing Authorization to Unauthenticated Sensitive Personal Data Disclosure via subject-access-request AJAX Endpoint (process_now/is_ajax Parameters)	Patched	CVE-2026-10034	5.3	kalomba	June 18, 2026
WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users	Patched	CVE-2026-4283	9.1	shark3y	March 23, 2026
WP DSGVO Tools (GDPR) <= 3.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode	Patched	CVE-2026-0914	6.4	Muhammad Yudha - DJ	January 22, 2026
WP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Patched	CVE-2024-3201	6.4	Krzysztof Zając	May 22, 2024
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site Scripting	Patched	CVE-2021-4358	7.2	Jerome Bruandet	September 24, 2021
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion	Patched	CVE-2021-42359	7.5	Ram	September 21, 2021
WP DSGVO Tools (GDPR) <= 2.2.18 - Cross-Site Scripting	Patched	CVE-2019-15777	5.4		August 27, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation