Approved changes feed: RSS · Atom

cpe:2.3:a:wplegalpages:privacy_policy_generator,_terms_&_conditions_generator_wordpress_plugin_:_wp_legal_pages:*:*:*:*:*:*:*:*

part: a version: _wp_legal_pages update: *

VendorWplegalpages (8d138ec3-4c9c-5958-8f5a-511148f127ad)
ProductPrivacy Policy Generator, Terms & Conditions Generator Wordpress Plugin (635a276b-132c-55e8-a17a-c1b790bc3071)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11816 vulnerable 2026-06-08 07:04:28.985203 Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect
MEDIUM (5.3)
The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disconnect_account_request() function in all versions up to, and including, 3.5.1. This makes it possible for unauthenticated attackers to disconnect the site from its API plan.
Published: 2025-11-01T01:47:40.230Z
Updated: 2026-04-08T16:41:21.776Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.