WP GDPR MAR 2021: 5 Sensitive Data Disclosures MAR 2021

MANAGED WP GDPR MAR 2021 REPORT

5 Sensitive Data Disclosures MAR 2021

Be informed about the latest WP GDPR MAR 2021 - Sensitive Data Disclosures MAR 2021, identified and reported publicly. These Sensitive or Private Data Disclosures have a severe negative financial impact on any business. Consider our FREE GDPR AUDIT.

An estimated 113.000+ active WordPress installations are susceptible to these personal data exfiltrations, considering only the publicly available numbers. The estimated number can double with versions already closed due to security concerns.

It is a -28% decrease compared to February 2022. Read more about our previous report here: WP GDPR FEB 2021: 7 Sensitive Data Disclosures FEB 2021. The following cases made headlines PUBLICLY just last month in the WP GDPR MAR 2021 category.

---

• AccessAlly #1 LMS & Membership Solution for Industry Leaders < 3.5.7 - $_SERVER Superglobal Leakage
  • AccessAlly is a comprehensive course plugin built on WordPress, the #1 open source platform on the web, which gives you the power and flexibility that you need to scale a successful online business. Active installations: NOT Public info.

---

• Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation
• Controlled Admin Access < 1.5.6 - Improper Access Control to Privilege Escalation
  • Give a temporary limited admin. access to themes designers, plugins developers and support agents. The plugin is simple and clean, it helps the administrator to create a user with a temporary access and choose which pages in your admin area which you don’t want the user to access. send the details to the user and when he finished his task, you can easily deactivate the account and activate it later. Active installations: 8,000+

---

• Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure
  • Connect your WordPress site and your Patreon to increase your patrons and pledges! Active installations: 5,000+

---

• User Profile Picture < 2.5.0 - Sensitive Information Disclosure
  • Set or remove a custom profile image for a user using the standard WordPress media upload tool.

    Active installations: 60,000+

---

• wpDataTables – Tables & Table Charts < 3.4.2 - Improper Access Control leading to Table Permission Takeover
  • wpDataTables is a popular WordPress table plugin used to quickly create tables & table charts from Excel, CSV, PHP and other data sources. Use our WP table plugin to represent vast amounts of complicated data in concise, user-friendly way using tables or charts. Active installations: 40,000+

WP GDPR MAR 2021 BRIEF: Personal or Private data is information that must be protected against unauthorised access, preventing Sensitive Data Disclosures and data breaches.

---

What is Sensitive Data Disclosures MAR 2021?

The loss, misuse, modification or unauthorised access to your most sensitive data or personal data can damage your business, ruin customer trust, breach customer privacy and in extreme cases, might attract hefty fines by law regulations.

What is the impact of a WP GDPR MAR 2021?

Data privacy is becoming more and more imperative. Fines vary from country to country in Europe. In over 80 countries, personally identifiable information (PII) is protected by information privacy laws that outline limits to collecting and using PII by public and private organisations.

These laws require organisations to give clear notice to individuals about what sensitive data is collected, the reason for collecting and the planned uses of the data. In consent-based legal frameworks, like GDPR, explicit consent from the individual is required.

What kind of Sensitive Data are exploited??

Sensitive information includes all data, whether original or copied, which contains:

- Personal data: as defined by The EU General Data Protection Regulation (GDPR). A series of broad laws to prevent or discourage identity theft and to guard and protect individual privacy. In general, sensitive data is any data that reveals: Racial or ethnic origin; Political opinion; Religious or philosophical beliefs; Trade union membership; Genetic data; Biometric data; Health data; Sex life or sexual orientation; Financial information (bank account numbers and credit card numbers); Classified information.

- Protected Health Information (PHI): as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). PHI under the law is any information about health status, provision of health care, or payment for health care that is created or collected by a Covered Entity (or a third-party associate) that can be linked to a specific individual.

- Education records: as defined by the Family Educational Rights and Privacy Act of 1974 (FERPA). FERPA governs access to educational information and records by potential employers, publicly funded educational institutions, and foreign governments.

- Customer information: as required by financial institutions to explain how they share and protect their customers' private information.

Related Posts to MANAGED GDPR for your WP/Woo: