medium4.3
CVE-2026-85348
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that se…
Impact
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected products
| Product | Affected versions |
|---|---|
| GDPR Data Request Form WordPress Plugin | through 1.7.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.