Plugin icon

Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

gdpr-cookie-consent

Vulnerabilities:

9

Last Updated:

March 31, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent < 4.1.3 - Missing Authorization to Sensitive Information Exposure
Fixed in
Fixed in 4.1.3
CVSS
7.5 (high)
Published
2025-12-30
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.4 - Missing Authorization
Fixed in
Fixed in 4.0.4
CVSS
5.3 (medium)
Published
2025-12-16
Title
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent < 4.0.8 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Fixed in
Fixed in 4.0.8
CVSS
5.3 (medium)
Published
2025-12-15
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.8 - Missing Authorization
Fixed in
Fixed in 4.0.8
CVSS
5.3 (medium)
Published
2025-11-08
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.4 - Missing Authorization
Fixed in
Fixed in 4.0.4
CVSS
4.3 (medium)
Published
2025-06-05
Title
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent < 3.8.1 - Cross-Site Request Forgery
Fixed in
Fixed in 3.8.1
CVSS
4.3 (medium)
Published
2024-12-11
Title
Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) < 3.6.6 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script
Fixed in
Fixed in 3.6.6
CVSS
4.3 (medium)
Published
2024-06-25
Title
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) < 3.3.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
Fixed in
Fixed in 3.3.0
CVSS
7.2 (high)
Published
2024-04-16
Title
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) < 3.1.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Fixed in
Fixed in 3.1.0
CVSS
5.3 (medium)