WP DSGVO Tools (GDPR)

WP DSGVO Tools (GDPR) has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 8 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (50%). Other recurring categories include Missing Authorization, Improper Access Control.

Every one of the 8 issues recorded for WP DSGVO Tools (GDPR) has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, one record each. WP DSGVO Tools (GDPR) is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 0.

Strategic Overview

Avg CVSSMedium
6.6/ 10
Patch Coverage100%
Open

0

Fixed

8

Get automatic notifications for all WP DSGVO Tools (GDPR) vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2026-4283

WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users

Read the full analysis

Vulnerability Records

8 records
2026-06-18 16:02CVE-2026-10034
5.3
Medium
kalombaYes
2026-06-18 00:00CVE-2026-11869
5.3
Medium
Shivamani VastralaYes
2026-03-23 16:27CVE-2026-4283
9.1
Critical
shark3yYes
2026-01-22 00:00CVE-2026-0914
6.4
Medium
Muhammad Yudha - DJYes
2024-05-22 13:28CVE-2024-3201
6.4
Medium
Krzysztof ZającYes
2021-09-24 00:00CVE-2021-4358
7.2
High
Jerome BruandetYes
2021-09-21 00:00CVE-2021-42359
7.5
High
RamYes
2019-08-27 00:00CVE-2019-15777
5.4
Medium
AnonymousYes
Showing 1–8 of 8 reports
WP DSGVO Tools (GDPR) banner
Latestv3.1.40

WP DSGVO Tools (GDPR)

legalweb.io

Author

legalweb.io

4.0(116)
80/100
Last Updated
2026-06-16 (3mo ago)
Active Installs
10,000+
Downloads
1,115,425
Requires WP
3.0.1+
Requires PHP
5.6.0+
Tested up to
WP 0
Created
2018-04-20 (9y ago)

We recommend that all of our users and customers of the premium version switch to legal web cloud, as we are no longer adding any new features and functions to WP GDPR tools. ALL-IN-ONE SOLUTION As a user of WP GDPR you have two simple tasks: Selection of the services used Filling of a few input fields WP GDPR does everything else: Creation of the cookie popup Creation of the cookie notice Control of services Control of embeddings Generation of the data protection information Creation of the imprint TOP PRIORITY Our top priority is compliance with the laws and the regulations of courts and of data protection authorities. We do not offer options that are not legally or legally highly controversial. Why so strict? Because our users have neither the desire nor the budget to lead complex procedures through all appeals, just to find out whether any cool feature is legally permissible or not. LAWYER CREATED All legal texts were created by the law firm Marketingrecht.eu, which specializes in IT, internet and data protection law. TRANSLATED BY COURT INTERPRETERS We do not use community translations. All translations have been translated by sworn and certified interpreters. Official certified by WPML. Works also with Polylang and WPGlobus. BASIC FEATURES Free & Premium optimized for Germany & Austria can also be used in other EU countries and third countries Tag Manager compatible IMPRINT Automatic creation Integration via page selection or shortcode (from cloud version: significantly expanded imprint generator) COOKIE POPUP / COOKIE NOTICE / PRIVACY INFO Our feature list gets longer and longer every month. Opt-in / consent management Opt-out / cancellation management definable validity of consent definable waiting time until the new request for consent correct grouping of services Display of all mandatory information No illegal nudging (obtaining consent through psychotricks) Style configurator Responsible & data protection officer Responsible Data protection officer Data protection officer Tag manager Google Tag Manager Matomo Tag Manager FREE VERSION The free version includes all the services that are important for private websites: Cookie popup Cookie notice Data protection info Google Analytics Matomo WP Statistics Right to be forgotten (with time management) Automated directory query (as PDF and JSON) and deletion Translatable, multilingual support – officially WPML certified PREMIUM VERSION Licenses for the premium version won’t be continued. Legal web cloud is our new premium plugin. We recommend that all of our users and customers of the premium version switch to legal web cloud, as we are no longer adding any new features and functions to WP DSGVO Tools. ** LegalWeb Cloud ** The new version. Our advanced GDPR/DSGVO plugin, LegalWeb Cloud also makes our services accessible via API and for other CMS and brings new features. CMS independent Data acquisition via REST API or manual implementation Plugins for WordPress and Drupal, Typo3. Development: Contao, Redaxo, Joomla, NEOS, Shopware, Magento Useable also via CDN, no plugin needed more languages for legal texts (DE, EN, IT, ES, FR, HU, SE,) extended imprint generator further services for the data protection generator Terms and conditions generator seal of approval live chat, chat bots integrations custom integrations barrier-free according to WCAG 2.1 AA different designs: As a popup, as a sidebar, as a bar at the bottom of the page, … visit https://legalweb.io/privacy-cloud/ for more information SUPPORT & FAQ We are here for you! Free webinars! check our schedule on legalweb.io or in your WordPress plugins for all users: wordpress.org for premium & cloud users: legalweb.io/support/ Important note: This plugin only supports you in fulfilling the guidelines for compliance with the GDPR. Installation is not enough – correct configuration of this plugin by a website administrator is required to achieve conformity. A 100% conformity only through the plugin cannot be guaranteed, as this depends on several other aspects. If you use our plugin and enable integrations with your custom snippets (Google Analytics, FB Pixel, Criteo,…), 3rd party scripts get loaded or remote ressources get called if/after your visitors opt-in for them. An valid statement in the privacy policy (to fulfill GDPR requirements) gets added automatically by this plugin. In some features automatically generated emails get sent to you or your customers. In these emails Google Fonts are used.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C