https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:38:41.744045+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-4348 CVE-2021-4348 — Ultimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export 2026-10-17T12:38:41.745532+00:00

Affected: createit-pl Ultimate GDPR & CCPA Compliance Toolkit for WordPress

The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the export_settings & import_settings functions in versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to change plugin settings and conduct attacks such as redirecting visitors to malicious sites.