What is GHSA-chgf-x9q3-mqh2?

GHSA-chgf-x9q3-mqh2 is a security advisory published by GitHub Security Advisories with Medium severity. The Privacy Policy Generator, Terms \u0026 Conditions, GDPR, CCPA, Cookie Policy \u0026 Disclaimer...

Which CVE IDs does GHSA-chgf-x9q3-mqh2 cover?

GHSA-chgf-x9q3-mqh2 covers the following CVE IDs: CVE-2026-16984. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-chgf-x9q3-mqh2?

GHSA-chgf-x9q3-mqh2 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-chgf-x9q3-mqh2MediumCVSS 6.5

The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer...

Vendor

GitHub Security Advisories

Published

August 26, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-16984 →

📋 Description

The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1 does not include an authorization check on a REST route that returns stored account data, allowing unauthenticated visitors to retrieve the connected service's API secret and account details, which can then be used to disconnect the Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin before 3.7.1's integration.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-16984
https://wpscan.com/vulnerability/c1bf0335-c954-473b-af30-7f227f041790
https://github.com/advisories/GHSA-chgf-x9q3-mqh2