Privacy Policy Generator – WPLP Legal Pages

Vulnerabilities

• CVE-2025-8565

  Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitr

  High 8.1

• CVE-2025-67974

  WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability

  High 7.5

• CVE-2026-78259

  WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability

  High 7.3

• CVE-2015-9428

  The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-busi

  Medium 6.5

• CVE-2025-11816

  Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect

  Medium 5.3

• CVE-2023-4968

  WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode

  Medium 4.8

• CVE-2024-12636

  Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.2.7 - Cross-Site Request Forgery

  Medium 4.3