WordPress Plugin Vulnerabilities
Complianz – GDPR/CCPA Cookie Consent < 7.5.2 - Unauthenticated Sensitive Information Exposure
Description
The plugin does not restrict access to some of the data it exposes, allowing unauthenticated attackers to retrieve non-public user or configuration information from the site.
Affects Plugins
Fixed in 7.5.2 References
Classification
Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Ananda Dhakal
Verified
No
WPVDB ID
Timeline
Publicly Published
2026-07-22 (about 2 months ago)
Added
2026-07-29 (about 2 months ago)
Last Updated
2026-08-28 (about 1 month ago)
