CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects WordPress. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-3599
Severity
MEDIUM
CVSS
5.3
EPSS
0.53%
WordPress
Original NVD Description
The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the gdpr_policy_process_delete() function in all versions up to, and including, 3.0.2. This makes it possible for unauthenticated attackers to delete arbitrary posts.
Related CVEs
Other vulnerabilities affecting the same vendor(s)