Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Cookie Consent 0.0.10 Clear all filters
TI-2026-14859 CVE-2026-18046 · GHSA-xcj8-382p-cc46

Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update

Priority LOW 20

The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores its geolocation service license key, so the route falls back to…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00313 Published 2026-08-12 Fixed in 0.0.10 CWE-863
TI-2026-12949 CVE-2026-15388 · GHSA-m52v-mw7v-c5gf

Cookie Consent < 0.0.10 - Subscriber+ Consent Settings Update and Consent Log Disclosure

Priority MEDIUM 53

The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall back to an authentication-only gate, allowin…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00333 Published 2026-08-12 Fixed in 0.0.10 CWE-863