EUVD-2026-66271
GHSA-chgf-x9q3-mqh2
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
REST endpoint reachable with no auth (AV:N, PR:N); retrieved credentials enable service disconnection, representing an integrity impact (I:L) beyond what the original vector captures.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1 does not include an authorization check on a REST route that returns stored account data, allowing unauthenticated visitors to retrieve the connected service's API secret and account details, which can then be used to disconnect the Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1's integration.
AnalysisAI
Unauthenticated access to a missing-authorization REST endpoint in the Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before version 3.7.1 exposes the site's connected compliance-service API secret and account credentials to any visitor. Using the retrieved secret, an attacker can call the connected third-party compliance service API to sever the plugin's integration, causing GDPR, CCPA, and cookie policy documents to stop displaying on the affected WordPress site. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No authentication, user interaction, or non-default configuration is required to reach the vulnerable REST endpoint - it is registered on plugin activation and accessible from the network by default. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) accurately captures network accessibility and zero-authentication exploitation, but the 6.5 score somewhat undersells the business risk for compliance-sensitive deployments. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the plugin to version 3.7.1 or later, which introduces the missing authorization check on the affected REST API route; this is a vendor-released patch confirmed by WPScan at https://wpscan.com/vulnerability/c1bf0335-c954-473b-af30-7f227f041790/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today