WordPress GDPR plugin inadvertently exposed sites to hackers

Critical vulnerabilities in WordPress' GDPR-compliance plugin let attackers change URL settings and become site amin