Advisories · Technology
wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent.
Every CVE that names wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- Broken access control
- CVSS 4.9 Medium
Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- SQL injection
- CVSS 4.9 Medium
Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- SQL injection
- CVSS 7.5 High
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- Broken access control
- CVSS 5.3 Medium
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- Broken access control
- CVSS 4.3 Medium
Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- Broken access control
- CVSS 7.2 High
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
- wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
- Broken access control