Description
Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Data443 Risk Mitigation | GDPR Framework By Data443 | ≤ 2.5.0 | — |
Critical · 9.8
CVE-2026-39797
EUVD-2026-93041GHSA-p7w2-9cvg-5p4v
WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack