cve-2018-19207

{
  "cvss": 0.0,
  "datePublished": "2018-11-09T00:00:00Z",
  "dateUpdated": "2018-11-09T00:00:00Z",
  "description": "The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018.",
  "dueDate": "",
  "id": "CVE-2018-19207",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "wp-gdpr-compliance",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "van-ons wp-gdpr-compliance Direct Request",
  "vendor": "van-ons"
}