All products
gdpr-cookie-consent
WordPress · Plugin27 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-42636 |
gdpr-cookie-consent |
WordPress |
High
|
Fix reported |
|
| WPLP Cookie Consent <= 4.4.3 - Cross-Site Request ForgeryCVE-2026-85131 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| WPLP Cookie Consent <= 4.4.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-85130 |
gdpr-cookie-consent |
WordPress |
High
|
Fix reported |
|
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode 4.0.2 - 4.4.1 - Missing Authorization to Information ExposureCVE-2026-85132 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' ParameterCVE-2026-14989 |
gdpr-cookie-consent |
WordPress |
High
|
Fix reported |
|
| WPLP Cookie Consent <= 4.4.1 - Missing AuthorizationCVE-2026-85133 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| WPLP Cookie Consent <= 4.4.1 - Missing AuthorizationCVE-2026-82185 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| WPLP Cookie Consent <= 4.4.1 - Missing AuthorizationCVE-2026-82184 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode < 4.4.2 - Authenticated (Administrator+) SQL InjectionCVE-2026-82186 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.1 - Unauthenticated Arbitrary File UploadCVE-2026-82970 |
gdpr-cookie-consent |
WordPress |
Critical
|
Fix reported |
|
| WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST EndpointCVE-2026-75865 |
gdpr-cookie-consent |
WordPress |
Critical
|
Fix reported |
|
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.3.9 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-73359 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' ParameterCVE-2026-13360 |
gdpr-cookie-consent |
WordPress |
High
|
Fix reported |
|
| Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve EntriesCVE-2026-15136 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX ActionCVE-2026-12955 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' ParameterCVE-2026-14475 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' ParameterCVE-2026-12920 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information ExposureCVE-2025-11754 |
gdpr-cookie-consent |
WordPress |
High
|
Fix reported |
|
| Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.3 - Missing AuthorizationCVE-2025-66080 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
| Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.7 - Missing AuthorizationCVE-2025-66133 |
gdpr-cookie-consent |
WordPress |
Medium
|
Fix reported |
|
