Advisories · Technology
WPLP Cookie Consent.
Every CVE that names WPLP Cookie Consent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs
- WPLP Cookie Consent
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF
- WPLP Cookie Consent
- Cross-site request forgery (CSRF)
- CVSS 5.4 Medium
WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions
- WPLP Cookie Consent
- Broken access control
- CVSS 4.3 Medium
WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan
- WPLP Cookie Consent
- Broken access control
- CVSS 4.3 Medium
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset
- WPLP Cookie Consent
- Broken access control
- CVSS 5.3 Medium
WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update
- WPLP Cookie Consent
- Broken access control
- CVSS 4.1 Medium
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
- WPLP Cookie Consent
- SQL injection