Filtered by vendor Ninjateam Subscriptions
Filtered by product Gpdr Ccpa Compliance Support Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-36718 1 Ninjateam 1 Gpdr Ccpa Compliance Support 2024-11-21 9.8 Critical
The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deserialization of untrusted input "njt_gdpr_allow_permissions" value. This allows unauthenticated attackers to inject a PHP Object.