Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ninjateam Component: Gdpr Ccpa Compliance & Cookie Consent Banner Clear all filters
TI-2025-18308 CVE-2025-24591 · GHSA-mcj2-mqj3-5r2j

WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00506 Published 2025-01-24 No fix listed CWE-862
TI-2024-05208 CVE-2024-5607 · GHSA-v3mr-mw53-hx85

Missing authorization in ninjateam GDPR CCPA Compliance & Cookie Consent Banner

Priority LOW 24

The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings() in all versions u…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00276 Published 2024-06-07 No fix listed CWE-862