Known vulnerabilities in WP DSGVO Tools (GDPR)

WP DSGVO Tools (GDPR) by legalweb.io help you to fulfill the GDPR (DSGVO) compliance guidance (GDPR)

7Reported vulnerabilities

9.1Highest CVSS score

3.1.40Latest version

10,000+Active installs

What to do now

Update WP DSGVO Tools (GDPR) to 3.1.40 or later. 7 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 16, 2026 / Tested up to WordPress: false / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2019-15777	Medium 5.4	1.1%	Before 2.2.19	`2.2.19`	August 29, 2019
CVE-2026-4283	Critical 9.1	0.4%	0 to 3.1.38 (inclusive)	`3.1.39`	March 24, 2026
CVE-2021-42359	High 7.5	3.8%	3.1.23 and earlier	`3.1.24`	September 21, 2021
CVE-2026-0914	Medium 6.4	0.3%	0 to 3.1.36 (inclusive)	`3.1.37`	January 23, 2026
CVE-2024-3201	Medium 6.4	0.3%	3.1.32 and earlier	`3.1.33`	May 22, 2024
CVE-2026-10034	Medium 5.3	0.6%	0 to 3.1.39 (inclusive)	`3.1.40`	June 19, 2026
CVE-2026-11869	Medium 5.3	0.3%	3.1.39 and earlier	`3.1.40`	June 18, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.