Wplegalpages Privacy Policy Generator – WPLP Legal Pages vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Wplegalpages Privacy Policy Generator – WPLP Legal Pages: 1 record(s), with affected versions and fixes.
CVE-2025-11816
Medium · 5.3
CWE-862 Oct 31, 2025
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect
The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disconnect_account_request() function in all versions up to, and including, 3.5.1. This makes it possible for unauthenticated attackers to disconnect the site from its API plan.