WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in GDPR Data Request Form

Use WordPress Core GDPR tools to build front-end Personal Data export/erasure forms (includes Widget, Gutenberg Block, shortcode & Hooks).

2Reported vulnerabilities
6.4Highest CVSS score
1.7Latest version
5,000+Active installs

What to do now

Update GDPR Data Request Form to 1.7 or later. 1 of these have a fixed version available. Updating resolves them.

Plugin last updated: November 27, 2025 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-24836 Medium 6.4 0.3% 1.6 and earlier 1.7 February 2, 2024
CVE-2026-85348 Medium 4.3 0.1% 1.5 to 1.7.1 (inclusive) — October 9, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.