Skip to content
OpenAdvisories

Vendor

mlfactory

5 known vulnerabilities.

Products

DSGVO All in one for WP 3 DSGVO Google Web Fonts GDPR 1 Shirt Product Designer for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-4298

    DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

    The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvo_reset_policy_service_func() function lacking both capability checks and nonce verification while processi…

    mlfactory DSGVO All in one for WP Web / CMS
  • Medium 6.5
    CVE-2024-13356

    DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion

    The DSGVO All in one for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6. This is due to missing or incorrect nonce validation in the user_remove_form.php file. This makes it possible for unauthent…

    mlfactory DSGVO All in one for WP Web / CMS