Skip to main content

Wp Cookie Consent

4 CVEs product

Monthly

CVE-2024-11724 Dec 12, 07:15 MEDIUM PATCH This Month

The Cookie Consent for WP - Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) plugin for WordPress is vulnerable to unauthorized modification of data due to a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Wp Cookie Consent Wordpress Plugin Wpeka
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-4869 Jun 26, 00:15 HIGH This Week

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wp Cookie Consent Wordpress Plugin Wpeka
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2024-3599 May 02, 17:15 MEDIUM PATCH This Month

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the gdpr_policy_process_delete() function in. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Wp Cookie Consent Wordpress Plugin Wpeka
NVD
CVSS 3.1
5.3
EPSS
0.2%
CVE-2023-23678 Nov 07, 16:15 MEDIUM This Month

A vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent.2.5. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Information Disclosure Wp Cookie Consent Wordpress Plugin Wpeka
NVD
CVSS 3.1
4.0
EPSS
0.5%
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

The Cookie Consent for WP - Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) plugin for WordPress is vulnerable to unauthorized modification of data due to a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Wp Cookie Consent +2
NVD
EPSS 3% CVSS 7.2
HIGH This Week

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wp Cookie Consent +2
NVD
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the gdpr_policy_process_delete() function in. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Wp Cookie Consent +2
NVD
EPSS 0% CVSS 4.0
MEDIUM This Month

A vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent.2.5. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Information Disclosure Wp Cookie Consent +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy