WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gdpr-cookie-consent
Published
2025-11-08
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.4 - Missing Authorization
Slug
gdpr-cookie-consent
Published
2025-12-16
Title
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent < 4.0.8 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
gdpr-cookie-consent
Published
2025-12-15
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.8 - Missing Authorization
Slug
gdpr-cookie-consent
Published
2025-12-30
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.4 - Missing Authorization
Slug
gdpr-cookie-consent
Published
2026-02-18
Title
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent < 4.1.3 - Missing Authorization to Sensitive Information Exposure
Slug
gdpr-cookie-consent
Published
2026-07-02
Title
Cookie Banner for GDPR / CCPA < 4.3.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Slug
gdpr-cookie-consent
Published
2026-07-09
Title
Cookie Banner for GDPR / CCPA < 4.3.7 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter
Slug
gdpr-cookie-consent
Published
2026-07-09
Title
Cookie Banner for GDPR / CCPA < 4.3.7 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action
Slug
gdpr-cookie-notice
Published
2025-04-01
Title
GDPR Cookie Notice <= 1.2.0 - Missing Authorization
Slug
gdpr-data-request-form
Published
2024-02-02
Title
GDPR Data Request Form < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gdpr-framework
Published
2024-12-07
Title
The GDPR Framework By Data443 < 2.2.0 - Admin+ Stored XSS
Slug
gdpr-personal-data-reports
Published
2025-01-16
Title
GDPR Personal Data Reports <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gdpr-tools
Published
2025-03-20
Title
GDPR Tools <= 1.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
gdreseller
Published
2024-10-31
Title
GDReseller <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gdreseller
Published
2025-01-16
Title
GDReseller <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gdy-modular-content
Published
2025-01-06
Title
GDY Modular Content < 0.9.93 - Reflected Cross-Site Scripting
Slug
gearside-developer-dashboard
Published
2025-05-09
Title
WordPress Gearside Developer Dashboard <= 1.0.72 - Reflected XSS
Slug
gecka-terms-thumbnails
Published
2024-01-05
Title
Gecka Terms Thumbnails <= 1.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
geeky-bot
Published
2026-01-13
Title
GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation < 1.1.9 - Unauthenticated Stored Cross-Site Scripting
Slug
geeky-bot
Published
2026-04-08
Title
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content < 1.2.1 - Unauthenticated SQL Injection
Slug
geeky-bot
Published
2026-04-21
Title
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content < 1.2.3 - Unauthenticated Arbitrary File Upload
Slug
geeky-bot
Published
2026-05-04
Title
GeekyBot < 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action
Slug
geeky-bot
Published
2026-05-04
Title
GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation < 1.2.1 - Unauthenticated SQL Injection via 'attributekey'
Slug
geeky-bot
Published
2026-06-29
Title
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content < 1.2.6 - Unauthenticated SQL Injection
Slug
geeky-bot
Published
2026-07-13
Title
GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History