WordPress plugin
DSGVO All in one for WP security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium6
- Low0
All DSGVO All in one for WP vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption ≤5.0No patch available | CVE-2026-96741 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Settings Reset ≤4.9Update to 5.0 | CVE-2026-4298 | |
| Medium6.5 | Cross-Site Request Forgery to Account Deletion ≤4.6Update to 4.7 | CVE-2024-13356 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤4.5Update to 4.6 | CVE-2024-43964 | |
| Medium4.3 | Cross-Site Request Forgery ≤4.3Update to 4.4 | CVE-2024-27967 | |
| Medium5.5 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤4.2Update to 4.3 | CVE-2022-2628 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting ≤3.9Update to 4.0 | CVE-2021-24294 |
- High7.2Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption
≤5.0No patch available
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Settings Reset
≤4.9Update to 5.0
- Medium6.5Cross-Site Request Forgery to Account Deletion
≤4.6Update to 4.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.5Update to 4.6
- Medium4.3Cross-Site Request Forgery
≤4.3Update to 4.4
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
≤4.2Update to 4.3
- Medium6.1Unauthenticated Stored Cross-Site Scripting
≤3.9Update to 4.0
DSGVO All in one for WP: common questions
Does DSGVO All in one for WP have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in DSGVO All in one for WP: 1 high, 6 medium. At least one is not fixed in the latest version.
How do I check which version of DSGVO All in one for WP I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent DSGVO All in one for WP vulnerability?
CVE-2026-96741, published Oct 28, 2026: DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption. Severity: High (CVSS 7.2).
Is any DSGVO All in one for WP vulnerability listed in CISA KEV?
No. None of the known DSGVO All in one for WP vulnerabilities is currently listed in the CISA KEV catalog.