A vulnerability was found in WP Legal Pages Plugin up to 3.4.3 on WordPress and classified as critical. Affected by this issue is the function
wplp_gdpr_install_plugin_ajax_handler
. Such manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-8565. The attack can be executed remotely. There is not any exploit available.