LGPD Framework By Data443
LGPD Framework By Data443 has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for LGPD Framework By Data443 has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by SOPROBRO. LGPD Framework By Data443 is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-52465LGPD Framework <= 2.0.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
LGPD Framework By Data443
Author
Data443 Risk Mitigation, Inc.
This plugin is a service of Data443.com and is a Data Security and Compliance company traded on the OTCMarkets as ATDS. This plugin gives a simple and elegant interface to handle Subject Access Requests (SARs) for the LGPD. In a few clicks, you can have a global privacy policy, enable and track consent management, track opt-in opt-out, enable a ‘do not sell’ function and button, and other functions listed below: ☑ Give users an optional time frame to give their consent ☑ Do Not Sell my private information capability released ☑ Privacy Safe Seal™ now available – Strengthen your reputation by giving a visual representation of your Privacy Solution in operation!; ☑ Enable DSAR on one page – allow even those without an account to automatically view, export and delete their personal data; ☑ Configure the plugin to delete or anonymize personal data automatically or send a notification and allow admins to do it manually; ☑ Track, manage and withdraw consent; ☑ Generate a LGPD-compatible Privacy Policy template for your site; ☑ Use a helpful installation wizard to get you started quickly; ☑ Report on related data items within your WordPress installation; ☑ Significantly reduce your staff time efforts dealing with DSARs; ☑ Enable your larger organization to summarize and consolidate DSAR work; ☑ Report to management on DSAR status, volume and data requirements; ☑ We provide this fully documented; ☑ We are developer-friendly. Everything can be extended, every feature and template can be overridden. ☑ Cookie solution ☑ Integration with WooCommerce Version 3.4.0 or later. ☑ Integration with Easy Digital Download Version 2.6 or later. ☑ Integration with Email Subscribers & Newsletters. Disclaimer Using The LGPD Framework does NOT guarantee compliance to LGPD. This plugin gives you general information and tools, but is NOT meant to serve as complete compliance package. Compliance to LGPD is risk-based ongoing process that involves your whole business. Data443 is not eligible for any claim or action based on any information or functionality provided by this plugin. Notice: Special Details for those using Caching Plugins: As the pages generated by our plugin are highly dynamic, we recommend you exclude all pages generated from caching in order for them to function properly. Here is an example of how to exclude our pages in W3 Total Cache and WP Fastest Cache. Documentation Knowledge Base Plugin support: LGPD Framework currently works with the following plugins ☑ Contact Form 7 & Contact Form Flamingo ☑ Gravity Forms – Coming soon! ☑ Formidable Forms – Coming soon! ☑ Ninja Forms – Coming soon! ☑ WooCommerce ☑ Easy Digital Download ☑ Email Subscribers & Newsletters ☑ WPML
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C