Wplegalpages
Wplegalpages WP Legal Pages: vulnerabilidades y CVE
Wplegalpages WP Legal Pages tiene 5 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses2
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-78259 | Alta (7.3) | 0.38% | — | 24 ago 2026 | Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions. |
| CVE-2025-11816 | Media (5.3) | 0.30% | — | 1 nov 2025 | The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the… |
| CVE-2025-8565 | Alta (8.1) | 0.27% | — | 18 sept 2025 | The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the… |
| CVE-2024-12636 | Media (4.3) | 0.18% | — | 25 dic 2024 | The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.6. This is due to… |
| CVE-2015-9428 | Media (6.5) | 0.87% | — | 26 sept 2019 | The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email,… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.