CVE-2025-11754 | GDPR Cookie Consent Plugin up to 4.1.2 on WordPress REST API Endpoint /gdpr/v1/settings authorization

A vulnerability classified as problematic has been found in GDPR Cookie Consent Plugin up to 4.1.2 on WordPress. Affected by this vulnerability is an unknown functionality of the file /gdpr/v1/settings of the component REST API Endpoint. This manipulation causes missing authorization.

This vulnerability is registered as CVE-2025-11754. Remote exploitation of the attack is possible. No exploit is available.