Description
WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility version 1.0.4 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin, or download it from wordpress.org repository
References
Related Vulnerabilities
WebLogic Observable Discrepancy Vulnerability (CVE-2019-3740)
Atlassian Jira CVE-2012-2926 Vulnerability (CVE-2012-2926)
Apache HTTP Server Other Vulnerability (CVE-2002-0661)
ownCloud Uncontrolled Resource Consumption Vulnerability (CVE-2017-5867)
WordPress Plugin Post Indexer (WPMU DEV) Multiple Vulnerabilities (3.0.6.1)