Read the docs

complianz

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

complianz records in CISA KEV

No complianz vulnerabilities are listed in CISA KEV.

Records

8 records

TI-2026-57690 CVE-2026-83561 · GHSA-99qh-wmgh-87j4

Cross-site scripting in Complianz GDPR/CCPA Cookie Consent Banner

Priority LOW 38

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versions up to, and including, 7.5.4 due to in…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00508 Published 2026-09-18 No fix listed CWE-79
TI-2026-75157 CVE-2026-97339 · GHSA-h8f6-jw33-7cr8

Stored cross-site scripting in Complianz Cookie Consent Banner via comments

Priority LOW 31

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all versions up to, and including, 7.5.5 due to ins…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00254 Published 2026-10-16 No fix listed CWE-79
TI-2026-03482 CVE-2026-4019 · GHSA-648g-qp2w-38qp

Missing authorization in Complianz – GDPR/CCPA Cookie Consent

Priority LOW 30

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the REST API endpoint at /wp-json/complianz/v1/consent-ar…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00276 Published 2026-04-29 No fix listed CWE-862
TI-2025-10247 CVE-2025-11185 · GHSA-3vq8-64jx-f882

Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient inpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00276 Published 2026-02-18 No fix listed CWE-79
TI-2026-02024 CVE-2026-2389 · GHSA-jc85-vmxr-w8g9

Cross-site scripting in Complianz – GDPR/CCPA Cookie Consent

Priority LOW 22

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.4.2.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.0023 Published 2026-03-26 No fix listed CWE-79
Open these records in search →