WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

Уязвимости

• CVE-2026-82970без авторизации≤ 4.4.1

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability

  Критич. 10.0

• CVE-2026-75865без авторизации≤ 4.4.1

  WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

  Критич. 9.8

• CVE-2025-11754без авторизации≤ 4.1.2

  Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to S

  Высокий 7.5

• CVE-2026-14989без авторизации≤ 4.4.1

  Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter

  Высокий 7.2

• CVE-2026-13360подписчик+≤ 4.3.5

  Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter

  Высокий 7.2

• CVE-2023-23678высокие права≤ 2.2.5

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injection

  Высокий 7.2

• CVE-2026-42636без авторизации · нужен клик≤ 4.4.6

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-73359подписчик+≤ 4.3.9

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2024-4869без авторизации≤ 3.2.0

  WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header

  Средний 6.1

• CVE-2025-66080без авторизации≤ 4.0.3

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2025-14061без авторизации≤ 4.0.7

  Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to U

  Средний 5.3

• CVE-2025-66133без авторизации≤ 4.0.7

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-3599без авторизации≤ 3.0.2

  WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

  Средний 5.3

• CVE-2026-14475админ≤ 4.3.6

  Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter

  Средний 4.9

• CVE-2026-12920админ≤ 4.3.5

  Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  Средний 4.9

• CVE-2026-15136без авторизации · нужен клик≤ 4.3.7

  Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries

  Средний 4.3

• CVE-2025-49285без авторизации · нужен клик≤ 3.8.0

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) Vulnerability

  Средний 4.3

• CVE-2026-12955подписчик+≤ 4.3.6

  Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action

  Средний 4.3

• CVE-2025-66075нужен вход≤ 4.0.3

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2024-11724подписчик+≤ 3.6.5

  Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticate

  Средний 4.3