WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cookie-notice-and-consent-banner
Published
2025-09-03
Title
Cookie Notice & Consent Banner for GDPR & CCPA Compliance < 1.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cookie-notice-bar
Published
2025-02-19
Title
Cookie Notice Bar <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cookie-notice-consent
Published
2023-09-25
Title
Cookie Notice & Consent < 1.6.1 - Admin+ Stored XSS
Slug
cookie-notice-consent
Published
2025-10-08
Title
Cookie Notice & Consent < 1.6.6 - Unauthenticated Stored Cross-Site Scripting
Slug
cookie-notice-consent
Published
2025-08-29
Title
Cookie Notice & Consent < 1.6.5 - Unauthenticated Stored Cross-Site Scripting
Slug
cookie-scanner
Published
2024-10-14
Title
Cookie Scanner <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
cookie-script-com
Published
2025-06-19
Title
Cookie-Script.com < 1.2.2 - Missing Authorization
Slug
cookie-warning
Published
2025-08-18
Title
Cookie Warning <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cookie-warning
Published
2025-08-18
Title
Cookie Warning <= 1.3 - Cross-Site Request Forgery
Slug
cookiebar
Published
2025-04-25
Title
cookieBAR <= 1.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cookiebot
Published
2020-03-23
Title
Cookiebot < 3.6.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
cookiebot
Published
2020-09-09
Title
Cookiebot < 3.6.1 - CSRF & XSS
Slug
cookiebot
Published
2025-03-05
Title
Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics < 4.4.2 - Missing Authorization to Authenticated (Subscriber+) Survey Submission
Slug
cookiebot
Published
2025-06-27
Title
Cookiebot < 4.5.9 - Cross-Site Request Forgery
Slug
cookiebot
Published
2026-01-29
Title
Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode < 4.6.5 - Missing Authorization
Slug
cookiecode
Published
2025-05-07
Title
CookieCode <= 2.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cookiehint-wp
Published
2025-03-31
Title
CookieHint WP <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cookiehint-wp
Published
2025-12-25
Title
CookieHint WP <= 1.0.0 - Unauthenticated Local File Inclusion
Slug
cookiehub
Published
2024-04-22
Title
CookieHub < 1.1.1 - Missing Authorization
Slug
cookielay
Published
2024-12-05
Title
Cookielay <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cookielay Shortcode
Slug
cookiemonster
Published
2023-08-30
Title
Cookie Monster <= 1.51 - Admin+ Stored XSS
Slug
cookies-and-content-security-policy
Published
2026-01-05
Title
Cookies and Content Security Policy < 2.35 - Unauthenticated Information Exposure
Slug
cookies-by-jm
Published
2023-08-17
Title
Cookies by JM <= 1.0 - Admin+ Stored XSS
Slug
cookies-pro
Published
2025-03-21
Title
Cookies Pro <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
cool-facebook-page-feed-timeline
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)