Mlfactory vulnerabilities
We track 2 vulnerabilities in Mlfactory products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Mlfactory vulnerabilities
- 7.2 High severity
DSGVO All in one for WP: Improper Neutralization of Input During Web Page Generation
The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption in all versions up to, and including, 5.0 due to insufficient input sanitization and output escaping. This make
- 9.8 Critical severity
DSGVO Google Web Fonts GDPR: Unrestricted Upload of File with Dangerous Type
The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the `DSGVOGWPdownloadGoogleFonts()` function in all versions up to, and including, 1.1. The function is exposed via a `wp_ajax_no