Read the docs

cookieinformation

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

cookieinformation records in CISA KEV

No cookieinformation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-gdpr-compliance 2 records HIGH

Records

2 records in Wp-gdpr-compliance · all components

TI-2023-06127 CVE-2023-6700 · GHSA-gj6f-cjc7-f9fg

Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update

Priority HIGH 73

The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01458 Published 2024-02-05 No fix listed CWE-862
TI-2022-00089 CVE-2022-0147 · GHSA-5r9x-pqj4-5w2w

Cookie Information < 2.0.8 - Reflected Cross-Site Scripting

Priority LOW 30

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0156 Published 2022-03-14 Fixed in 2.0.8 CWE-79
Open these records in search →