Complianz GDPR/CCPA Cookie Consent Banner

Уязвимости

• CVE-2023-34030без авторизации · нужен клик≤ 6.4.7

  WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2023-33333без авторизации · нужен клик≤ 6.4.6.1

  WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)

  Высокий 8.8

• CVE-2026-83561без авторизации≤ 7.5.4

  Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex

  Высокий 7.2

• CVE-2026-65497админ≤ 7.5.0

  WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability

  Высокий 7.2

• CVE-2025-11185участник+≤ 7.4.3

  Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 6.4

• CVE-2026-65498без авторизации≤ 7.5.0

  WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability

  Средний 5.3

• CVE-2026-4019без авторизации≤ 7.4.5

  Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint

  Средний 5.3

• CVE-2026-2389участник+≤ 7.4.4.2

  Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter

  Средний 4.9

• CVE-2023-6498админ≤ 6.5.5

  Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings

  Средний 4.8

• CVE-2026-65496автор+≤ 7.5.0

  WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability

  Средний 4.4

• CVE-2024-1592без авторизации · нужен клик≤ 6.5.6

  Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion

  Средний 4.3