CVE-2026-14816: The GDPR Framework < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam

Q: What is the severity of CVE-2026-14816?

The severity of CVE-2026-14816 is rated at 54, indicating a moderate risk.

Q: How do I fix CVE-2026-14816?

To fix CVE-2026-14816, update the GDPR Framework WordPress plugin to version 2.4.0 or later.

Q: What vulnerability does CVE-2026-14816 address?

CVE-2026-14816 addresses the lack of proper verification in the GDPR Framework plugin, allowing unauthorized consent record forgery.

Q: Who is affected by CVE-2026-14816?

Any WordPress site using the GDPR Framework plugin prior to version 2.4.0 is affected by CVE-2026-14816.

Q: What types of attacks can occur due to CVE-2026-14816?

CVE-2026-14816 allows unauthenticated attackers to forge consent records and spam Do Not Sell requests.

Published Aug 4, 2026

Updated

The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood the site's privacy-request queue with arbitrary entries.

Affected Software

1 affected component

WordPress plugin<2.4.0

Event History

Aug 4, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2026-14816?

The severity of CVE-2026-14816 is rated at 54, indicating a moderate risk.

How do I fix CVE-2026-14816?

To fix CVE-2026-14816, update the GDPR Framework WordPress plugin to version 2.4.0 or later.

What vulnerability does CVE-2026-14816 address?

CVE-2026-14816 addresses the lack of proper verification in the GDPR Framework plugin, allowing unauthorized consent record forgery.

Who is affected by CVE-2026-14816?

Any WordPress site using the GDPR Framework plugin prior to version 2.4.0 is affected by CVE-2026-14816.

What types of attacks can occur due to CVE-2026-14816?

CVE-2026-14816 allows unauthenticated attackers to forge consent records and spam Do Not Sell requests.

CVE-2026-14816: The GDPR Framework < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-14816?

How do I fix CVE-2026-14816?

What vulnerability does CVE-2026-14816 address?

Who is affected by CVE-2026-14816?

What types of attacks can occur due to CVE-2026-14816?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-14816?

How do I fix CVE-2026-14816?

What vulnerability does CVE-2026-14816 address?

Who is affected by CVE-2026-14816?

What types of attacks can occur due to CVE-2026-14816?