Medium severity4.3NVD Advisory· Published Oct 9, 2026· Updated Oct 9, 2026
CVE-2026-85348
CVE-2026-85348
Description
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.7.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.