WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gdpr-cookie-consent
Published
2024-12-11
Title
Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) < 3.6.6 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script
Slug
gdpr-cookie-consent
Published
2025-06-05
Title
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent < 3.8.1 - Cross-Site Request Forgery
Slug
gdpr-cookie-consent
Published
2025-11-08
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.4 - Missing Authorization
Slug
gdpr-cookie-consent
Published
2025-12-16
Title
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent < 4.0.8 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
gdpr-cookie-consent
Published
2025-12-15
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.8 - Missing Authorization
Slug
gdpr-cookie-consent
Published
2025-12-30
Title
Cookie Notice for GDPR, CCPA & ePrivacy Consent < 4.0.4 - Missing Authorization
Slug
gdpr-cookie-consent
Published
2026-02-18
Title
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent < 4.1.3 - Missing Authorization to Sensitive Information Exposure
Slug
gdpr-cookie-consent
Published
2026-07-02
Title
Cookie Banner for GDPR / CCPA < 4.3.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Slug
gdpr-cookie-consent
Published
2026-07-09
Title
Cookie Banner for GDPR / CCPA < 4.3.7 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter
Slug
gdpr-cookie-consent
Published
2026-07-09
Title
Cookie Banner for GDPR / CCPA < 4.3.7 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action
Slug
gdpr-cookie-consent
Published
2026-07-27
Title
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent < 4.3.8 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries
Slug
gdpr-cookie-consent
Published
2026-08-14
Title
Cookie Banner for GDPR / CCPA < 4.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter
Slug
gdpr-cookie-consent
Published
2026-08-18
Title
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode < 4.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
gdpr-cookie-consent
Published
2026-08-31
Title
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode < 4.4.2 - Unauthenticated Arbitrary File Upload
Slug
gdpr-cookie-consent
Published
2026-08-31
Title
WPLP Cookie Consent < 4.4.2 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint
Slug
gdpr-cookie-consent
Published
2026-09-02
Title
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
Slug
gdpr-cookie-consent
Published
2026-09-07
Title
WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update
Slug
gdpr-cookie-consent
Published
2026-09-07
Title
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset
Slug
gdpr-cookie-consent
Published
2026-09-07
Title
WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan
Slug
gdpr-cookie-consent
Published
2026-09-07
Title
WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions
Slug
gdpr-cookie-consent
Published
2026-09-08
Title
Cookie Banner for GDPR / CCPA < 4.4.2 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter
Slug
gdpr-cookie-consent
Published
2026-09-14
Title
WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF
Slug
gdpr-cookie-consent
Published
2026-10-05
Title
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode < 4.4.7 - Unauthenticated Stored Cross-Site Scripting
Slug
gdpr-cookie-consent
Published
2026-09-15
Title
WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs
Slug
gdpr-cookie-notice
Published
2025-04-01
Title
GDPR Cookie Notice <= 1.2.0 - Missing Authorization