Skip to content

CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-39797

WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-10-06
Updated: 2026-10-06
Assigning organization: Patchstack

Description

Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Data443 Risk Mitigation, Inc. GDPR Framework By Data443

Default version status: unaffected

n/a to ≤ 2.5.0affected

References

https://patchstack.com/database/wordpress/plugin/gdpr-framework/vulnerability/wordpress-gdpr-framework-by-data443-plugin-2-5-0-php-object-injection-vulnerability?_s_id=cve ↗