Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: WPeka Component: Wp Cookie Consent Clear all filters
TI-2024-10870 CVE-2024-11724 · GHSA-rgc9-pj6f-qfjr

Missing authorization in wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

Priority LOW 20

The Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00328 Published 2024-12-12 No fix listed CWE-862
TI-2024-04527 CVE-2024-4869 · GHSA-f82h-5m28-cr2p

Cross-site scripting in wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

Priority LOW 32

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to insufficient input sanit…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00377 Published 2024-06-25 No fix listed CWE-79
TI-2024-03354 CVE-2024-3599 · GHSA-xjf3-8j25-j4m3

Missing authorization in wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

Priority LOW 31

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the gdpr_policy_process_delete() function in all versions up to, an…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00525 Published 2024-05-02 No fix listed CWE-862
TI-2023-09492 CVE-2023-23678 · GHSA-9p49-m9cm-86gp

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injection

Priority LOW 35

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie Consent ( for GDPR, CCPA & ePrivacy ).This issue affects WP Cookie Consent ( for GDPR, CCPA & ePrivacy ): from n/a through 2.…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00629 Published 2023-11-07 No fix listed CWE-1236