Medium 5.3
2025-11-21< 1.4.7
CVE-2025-66077
Minimum safe version
1.4.7
Update to 1.4.7 or later to address 10 fixable vulnerabilities
CVE-2025-66077
CVE-2025-48242
Legal Pages < 1.3.9 - Missing Authorization
CVE-2024-32451
WordPress Legal Pages Plugin <= 1.3.7 is vulnerable to Broken Access Control
CVE-2023-47824
Legal Pages <= 1.3.8 - Missing Authorization
Legal Pages <= 1.3.7 - Missing Authorization on 'deleteLegalTemplate'
WordPress Legal Pages Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)
WordPress Legal Pages Plugin <= 1.0.1 - Cross Site Scripting (XSS)