Access Control Issues in Ninja Team GDPR CCPA Compliance Support Plugin

CVE-2025-48260

What is CVE-2025-48260?

The Ninja Team GDPR CCPA Compliance Support plugin for WordPress contains a missing authorization vulnerability, enabling attackers to exploit incorrectly configured access control security levels. This flaw primarily affects versions up to 2.7.3, allowing unauthorized users to gain access to sensitive areas of the application. Ensuring proper configuration and implementing robust access control measures is crucial for safeguarding user data and maintaining compliance with privacy regulations.

References