{"error":0,"message":null,"data":{"name":"Ultimate GDPR & CCPA Compliance Toolkit","plugin":"ct-ultimate-gdpr","link":null,"latest":null,"closed":null,"closed_reason":null,"closed_date":null,"vulnerability":[{"uuid":"0054d948fdc0d14b26603a9fbc377b5d804c9be4e66757e491dd195af41402d0","name":"Ultimate GDPR & CCPA Compliance Toolkit [ct-ultimate-gdpr] < 2.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"b015cb7dc5eb1f7c04fc90ae06cd45540de941d1","name":"WordPress Ultimate GDPR & CCPA Compliance Toolkit premium plugin <= 2.4 - Unauthenticated Settings Import & Export vulnerability","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/ct-ultimate-gdpr\/vulnerability\/wordpress-ultimate-gdpr-ccpa-compliance-toolkit-premium-plugin-2-4-unauthenticated-settings-import-export-vulnerability","description":"Unauthenticated Settings Import & Export vulnerability found by Jerome Bruandet in WordPress Ultimate GDPR & CCPA Compliance Toolkit premium plugin (versions <= 2.4).","date":"2021-02-05"}],"impact":[]},{"uuid":"2816ac67bd734dd1b3e500630e319de62ffb2745652f8baa1ae4d66e49661286","name":"Ultimate GDPR & CCPA Compliance Toolkit [ct-ultimate-gdpr] < 2.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"cd75a9a2-5d7e-428b-ad52-1afa974c35df","name":"wpscan.com","link":"https:\/\/wpscan.com\/vulnerability\/cd75a9a2-5d7e-428b-ad52-1afa974c35df","description":null,"date":null}],"impact":[]},{"uuid":"4e8c9e85d1eaf8a67138cb9cd5827ac291ba9a4743fa501080931767d736ea72","name":"Ultimate GDPR & CCPA Compliance Toolkit [ct-ultimate-gdpr] < 2.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"3dd7842a8527e889c62a65dcf5fb19311f89bd4f","name":"Ultimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/ct-ultimate-gdpr\/ultimate-gdpr-ccpa-24-unauthenticated-settings-import-export","description":"The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the export_settings & import_settings functions in versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to change plugin settings and conduct attacks such as redirecting visitors to malicious sites.","date":"2021-02-05"},{"id":"CVE-2021-4348","name":"CVE-2021-4348","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2021-4348","description":"[en] The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the export_settings & import_settings functions in versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to change plugin settings and conduct attacks such as redirecting visitors to malicious sites.","date":"2023-06-07"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"n","ui":"r","s":"c","c":"l","i":"l","a":"n","score":"6.1","severity":"m","exploitable":"2.8","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","score":"6.1","severity":"medium","av":"network","ac":"low","pr":"none","ui":"required","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.8","impact":"2.7"},"cwe":[{"cwe":"CWE-601","name":"URL Redirection to Untrusted Site ('Open Redirect')","description":"The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect."},{"cwe":"CWE-862","name":"Missing Authorization","description":"The product does not perform an authorization check when an actor attempts to access a resource or perform an action."}],"ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","kev":false,"kev_date":null}}}]},"updated":"1671633530"}