Description
WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility version 1.0.4 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin, or download it from wordpress.org repository
References
Related Vulnerabilities
Oracle JRE CVE-2014-0456 Vulnerability (CVE-2014-0456)
WordPress Plugin Grapefile File Sharing 'grapeupload.php' Arbitrary File Upload (1.1)
WordPress Plugin Resize Image After Upload Cross-Site Request Forgery (1.8.5)
WordPress Plugin Event Single Page Templates Addon For The Events Calendar Security Bypass (1.5)