Vulnerabilities

TI-2026-75157 CVE-2026-97339 · GHSA-h8f6-jw33-7cr8

Stored cross-site scripting in Complianz Cookie Consent Banner via comments

LOW 31

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all versions up to, and including, 7.5.5 due to ins…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00254 Published 2026-10-16 No fix listed CWE-79

TI-2026-57690 CVE-2026-83561 · GHSA-99qh-wmgh-87j4

Cross-site scripting in Complianz GDPR/CCPA Cookie Consent Banner

LOW 38

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elementor Cookie Blocker Regex in all versions up to, and including, 7.5.4 due to in…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00508 Published 2026-09-18 No fix listed CWE-79

TI-2026-46668 CVE-2026-65498 · GHSA-fw7w-9h9q-259h

WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability

LOW 30

Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2026-07-23 No fix listed CWE-497

TI-2026-46667 CVE-2026-65497 · GHSA-8f2q-4292-vgvq

WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability

LOW 34

Administrator PHP Object Injection in Complianz <= 7.5.0 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00539 Published 2026-07-23 No fix listed CWE-502

TI-2026-46666 CVE-2026-65496 · GHSA-5rq9-69w6-223q

WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability

LOW 20

Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00208 Published 2026-07-23 No fix listed CWE-918

TI-2026-03482 CVE-2026-4019 · GHSA-648g-qp2w-38qp

Missing authorization in Complianz – GDPR/CCPA Cookie Consent

LOW 30

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the REST API endpoint at /wp-json/complianz/v1/consent-ar…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00276 Published 2026-04-29 No fix listed CWE-862

TI-2026-02024 CVE-2026-2389 · GHSA-jc85-vmxr-w8g9

Cross-site scripting in Complianz – GDPR/CCPA Cookie Consent

LOW 22

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.4.2.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.0023 Published 2026-03-26 No fix listed CWE-79

TI-2025-10247 CVE-2025-11185 · GHSA-3vq8-64jx-f882

Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient inpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00276 Published 2026-02-18 No fix listed CWE-79

Vulnerabilities

Filters