CyberSecBulletin

Legalweb vulnerabilities

We track 1 vulnerability in Legalweb products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 24, 2026.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Legalweb vulnerabilities

  • 9.1 Critical severity

    WP DSGVO Tools (GDPR): Missing Authorization

    CVE-2026-4283Legalweb

    The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38. This is due to the `super-unsubscribe` AJAX action accepting a `process_now` parameter from unauthenticated users, wh