Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages

Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 9 are fixed as of October 2026. Their average CVSS score is 5.5, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (33%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 9 issues recorded for Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages has a vendor fix available, so running the current release closes all known holes.

9 independent researchers contributed these findings, one record each. Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

01234567891007.03.2014Today21.08.20155.4Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages < 1.1 - Cross-Site Scripting CVSS 5.4 · 21.08.201505.01.20225.4Privacy Policy Generator, Terms & Conditions Generator - WPLegalPages <= 2.7.0 - Arbitrary Settings Update to Stored Cross-Site Scripting CVSS 5.4 · 05.01.202210.10.20235.5WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode CVSS 5.5 · 10.10.202324.12.20244.3Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.2.7 - Cross-Site Request Forgery CVSS 4.3 · 24.12.202417.09.20258.1Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation CVSS 8.1 · 17.09.202531.10.20255.3Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect CVSS 5.3 · 31.10.202527.01.20265.3WPLegalPages <= 3.5.4 - Missing Authorization CVSS 5.3 · 27.01.202624.08.20265.3Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages <= 3.7.0 - Missing Authorization CVSS 5.3 · 24.08.202628.08.20265.3Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages < 3.7.1 - Unauthenticated Information Exposure CVSS 5.3 · 28.08.2026

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

9

Get automatic notifications for all Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2025-8565

Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation

Read the full analysis

Vulnerability Records

9 records
2026-08-28 00:00CVE-2026-16984
5.3
Medium
Vaibhav NarkhedeYes
2026-08-24 00:00CVE-2026-78259
5.3
Medium
HieuPenguinnnYes
2026-01-27 00:00CVE-2025-67974
5.3
Medium
NumeXYes
2025-10-31 13:45CVE-2025-11816
5.3
Medium
Rafshanzani SuhadaYes
2025-09-17 20:43CVE-2025-8565
8.1
High
wesley (wcraft)Yes
2024-12-24 00:00CVE-2024-12636
4.3
Medium
Lucio SáYes
2023-10-10 00:00CVE-2023-4968
5.5
Medium
István MártonYes
2022-01-05 00:00CVE-2021-25106
5.4
Medium
Krzysztof ZającYes
2015-08-21 00:00CVE-2015-9428
5.4
Medium
Marcin ProbolaYes
Showing 1–9 of 9 reports
Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages banner
Latestv3.8.0

Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages

WP Legal Pages

Author

WP Legal Pages

4.7(93)
94/100
Last Updated
2026-10-21 (7d ago)
Active Installs
10,000+
Downloads
1,311,288
Requires WP
6.2+
Requires PHP
7.0+
Tested up to
WP 7.1.3
Created
2014-03-07 (13y ago)

Privacy policy generator and terms and conditions generator for WordPress. Publish your legal pages in one click. WPLP Legal Pages is a legal page generator for GDPR, CCPA, and other privacy laws. Answer a short questionnaire about what your site does. The plugin writes your privacy policy, terms and conditions, cookie policy, disclaimer, and 30+ other legal pages, then publishes them as normal WordPress pages on your domain. ✅ Free: Privacy Policy, Terms of Use, DMCA Notice, and CCPA Privacy Notice ✅ One click from questionnaire to a live page ✅ Priced by site count, never per document. See plans ✅ One login for every client site, with the WPLP web app 3-minute setup walkthrough. Try it first in the Live Preview. ⚡ How it works Add your business details once. Business name, address, domain, niche. Every page you generate uses them. Answer the questionnaire. Tell it what your site collects: contact forms, analytics, newsletter sign-ups, checkout, affiliate links. Publish. The page goes live on your domain. Edit it in Gutenberg, Elementor, or Divi, the same as any other page. 📄 Legal pages you can generate Who writes them? Every template is written and reviewed by the WPLP in-house legal team and professionals. Templates come in 7 languages: English, German, Spanish, French, Italian, Dutch, and Portuguese. Free, in this plugin Privacy Policy Terms of Use DMCA Notice CCPA (California) Privacy Notice 30+ legal page templates on WPLP paid plans Privacy policy templates: Professional Privacy Policy (GDPR and CCPA), GDPR Privacy Policy, CPRA, Professional CCPA, COPPA Cookie policy templates: GDPR Cookie Policy, Cookies Policy, Double Dart Cookies Terms and conditions templates: Terms and Conditions (terms of service), Terms with forced agreement, End User License Agreement (EULA), Affiliate Agreement Ecommerce: Returns & Refunds Policy, Digital Goods Refund Policy Disclaimers: General Disclaimer, Earnings Disclaimer, Medical Disclaimer Disclosures: Affiliate Disclosure, Amazon Affiliate Disclosure, FTC Statement, Advertising Disclosure, Testimonials Disclosure, Confidentiality Disclosure EU: Impressum, EU Declaration of Conformity, Coordinated Vulnerability Disclosure (CVD) Policy for the Cyber Resilience Act Other: About Us, Blog Comments Policy, Linking Policy, External Links Policy, Facebook Policy, Newsletter Subscription & Disclaimer, Antispam, Custom Legal Page 🏢 Built for agencies and multiple client sites Every client site needs a privacy policy and terms page, and each one collects different data. Copying one client’s policy onto the next site doesn’t hold up. Manage every client site’s legal pages from one login. WPLP Legal Pages connects to the WPLP web app (app.wplegalpages.com). The web app is included on every plan, Free included. Multi-site management: add each client site, apply templates, and see which sites have which pages in one list. No WordPress Multisite needed: each client site keeps its own install and its own database. Your branding on client sites: remove WPLP branding and add your own logo (paid plans). Policy updates across the roster: when a law changes, WPLP drafts the new text. Nothing publishes until you approve it (paid plans). One vendor for pages and banner: manage WPLP Cookie Consent from the same login. Same features on every paid plan Professional, Business, and Agency have every feature. The price changes only with the number of sites: Free: 1 site Professional: up to 3 sites Business: up to 10 sites Agency: 25, 50, or 100 sites A 3-site freelancer and a 100-site agency get the same templates and tools. See the pricing page. 🔄 How your pages stay current Laws change. A privacy policy written 2 years ago may not match what the law asks for today. Edit at any time. Every page is a normal WordPress page. Tell returning visitors. The free policy update banner shows that a page changed, and the date it changed. Auto-updates on law change (paid plans). When a relevant law changes, WPLP drafts updated text for your page. A notice in your dashboard tells you it’s ready. Nothing goes live until you review and approve it. 🧰 Features Free Guided 4-step page wizard with a business profile that fills every page Automatic legal page links in the site footer Policy update banner for returning visitors, with the date of the change Affiliate disclosure notice, added with one toggle Adult site content declaration Control whether search engines index your legal pages WPLP block for Gutenberg Shortcode for every legal page Every paid plan (Professional, Business, and Agency) Same features on every plan. Compare plans and prices. 30+ legal page templates Legal pages in a popup, with an accept button Forced agreement: visitors accept selected terms before they continue, including at WooCommerce checkout Age verification popup for 18+ content and age-restricted products, with custom wording and page rules Auto-updates on law change, with your approval before anything goes live Remove WPLP branding and add your own logo ⭐ Why WPLP Legal Pages Pages live on your domain. They are standard WordPress pages in your own database. Pages stay if you deactivate. Deactivating removes the generator. Your published pages stay live. No per-document or pageview fees. The 4 free templates have no usage limit. Built for the WordPress editor. Works with Gutenberg, Elementor, and Divi. Part of the WPLP Compliance Platform. Legal pages, cookie consent, and the web app come from one team. ⚖️ Privacy laws covered GDPR (EU): GDPR Privacy Policy, GDPR Cookie Policy, and Professional Privacy Policy templates CCPA and CPRA (California): Standard CCPA (free), Professional CCPA, and CPRA templates COPPA (US): COPPA template for sites that collect data from children under 13 EU Cyber Resilience Act: CVD Policy and EU Declaration of Conformity templates Germany, Austria, Switzerland: Impressum template For cookie consent under LGPD (Brazil) and PIPEDA (Canada), use WPLP Cookie Consent. It covers LGPD on the free plan and PIPEDA on paid plans. Note: WPLP Legal Pages helps you publish legal pages that match your site. It doesn’t give legal advice. For some situations you still need a lawyer to review your pages. A review costs much less than a lawyer drafting every page from scratch. 👥 Who uses WPLP Legal Pages Agencies and freelancers: legal pages on every client build, managed from one login Bloggers and creators: privacy policy, disclaimer, and the affiliate disclosures ad and affiliate networks ask for WooCommerce stores: refund, returns, privacy, and terms pages that payment processors ask for Business sites: GDPR and CCPA pages, kept current SaaS and membership sites: terms, EULA, and age verification for gated content 🍪 Pair it with WPLP Cookie Consent A privacy policy describes the cookies on your site. A cookie banner gets consent for them. WPLP Cookie Consent is the free cookie banner from the same team: cookie scanning, script blocking, consent logs, and Google Consent Mode v2. 🔌 Compatibility Editors and page builders: Gutenberg, Elementor, Divi Ecommerce and forms: WooCommerce, WPForms, Contact Form 7, Gravity Forms Translation: WPML WordPress Multisite: works on Multisite networks Template languages: English, German, Spanish, French, Italian, Dutch, Portuguese 📚 Documentation and support WPLP website Pricing Overview Compliance Setup Wizard Guides FAQs Support forum Contact the WPLP team

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C