Pricing
Case studies
Login
Start trial
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
WP Legal Pages
Developer
4.3.7
Latest version
9,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
13 patched
4 Mitigation rules
Authenticated (Administrator+) SQL Injection vulnerability
<= 4.3.6
09/07/2026
Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification vulnerability
<= 4.3.6
09/07/2026
Authenticated (Administrator+) SQL Injection vulnerability
<= 4.3.5
02/07/2026
Missing Authorization to Sensitive Information Exposure vulnerability
<= 4.1.2
19/02/2026
Broken Access Control vulnerability
<= 4.0.3
30/12/2025
Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability
<= 4.0.7
16/12/2025
Broken Access Control vulnerability
<= 4.0.7
15/12/2025
Broken Access Control vulnerability
<= 4.0.3
08/11/2025
Cross Site Request Forgery (CSRF) Vulnerability
<= 3.8.0
05/06/2025
Missing Authorization to Authenticated (Subscriber+) Whitelist Script vulnerability
<= 3.6.5
12/12/2024
Unauthenticated Stored Cross-Site Scripting via Client-IP header vulnerability
<= 3.2.0
25/06/2024
Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability
<= 3.0.2
17/04/2024
CSV Injection vulnerability
<= 2.2.5
20/06/2023