Authorization Flaw in GDPR Framework Plugin for WordPress by Data443
CVE-2026-14816
Currently unrated
What is CVE-2026-14816?
The GDPR Framework plugin for WordPress, developed by Data443, allows unauthenticated attackers to bypass authorization checks when recording cookie-consent choices and processing privacy requests. This vulnerability could lead to the forging of consent records associated with arbitrary email addresses, resulting in potential misuse and a flood of unauthorized entries in the site's privacy request queue.
Affected Version(s)
The GDPR Framework By Data443 0 < 2.4.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.