A vulnerability labeled as critical has been found in WP Legal Pages Policy Generator, Terms & Conditions Generator Plugin and Privacy Policy Generator, Terms & Conditions Generator Plugin up to 3.5.1 on WordPress. This affects the function
disconnect_account_request. The manipulation results in missing authorization.
This vulnerability is identified as CVE-2025-11816. The attack can be executed remotely. There is not any exploit available.