WordPress security changelog
MEDIUM CVE-2026-65498 Deferred

Complianz: A security weakness

Complianz is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 7.5.0.

CVE / CNA score 5.3 CVSS 3.1 · audit@patchstack.com
NVD score Pending NVD has not published its own CVSS assessment.
Component
Complianz
Plugin slug
complianz-gdpr
Affected
n/a through 7.5.0
Safe version
> 7.5.0
Published
Jul 23, 2026
Weakness
CWE-497 — Exposure of Sensitive System Information to an Unauthorized Control Sphere

This CVE was published Jul 23, 2026 and is one of 6 known issues for this plugin.

What to do

Patch or disable the affected component.

Update Complianz to a release after 7.5.0, or disable and remove it until a fixed version is available.

Source record

Technical description

Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.

CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Primary and upstream sources