WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

Güvenlik açıkları

• CVE-2026-82970kimlik doğrulamasız≤ 4.4.1

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability

  Kritik 10.0

• CVE-2026-75865kimlik doğrulamasız≤ 4.4.1

  WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

  Kritik 9.8

• CVE-2025-11754kimlik doğrulamasız≤ 4.1.2

  Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to S

  Yüksek 7.5

• CVE-2026-14989kimlik doğrulamasız≤ 4.4.1

  Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter

  Yüksek 7.2

• CVE-2026-13360abone+≤ 4.3.5

  Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter

  Yüksek 7.2

• CVE-2023-23678yüksek yetki≤ 2.2.5

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injection

  Yüksek 7.2

• CVE-2026-73359abone+≤ 4.3.9

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-4869kimlik doğrulamasız≤ 3.2.0

  WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header

  Orta 6.1

• CVE-2025-66080kimlik doğrulamasız≤ 4.0.3

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2025-14061kimlik doğrulamasız≤ 4.0.7

  Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to U

  Orta 5.3

• CVE-2025-66133kimlik doğrulamasız≤ 4.0.7

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-3599kimlik doğrulamasız≤ 3.0.2

  WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

  Orta 5.3

• CVE-2026-14475yönetici≤ 4.3.6

  Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter

  Orta 4.9

• CVE-2026-12920yönetici≤ 4.3.5

  Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  Orta 4.9

• CVE-2026-15136kimlik doğrulamasız · tıklama gerekir≤ 4.3.7

  Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries

  Orta 4.3

• CVE-2025-49285kimlik doğrulamasız · tıklama gerekir≤ 3.8.0

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) Vulnerability

  Orta 4.3

• CVE-2026-12955abone+≤ 4.3.6

  Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action

  Orta 4.3

• CVE-2025-66075giriş gerekir≤ 4.0.3

  WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2024-11724abone+≤ 3.6.5

  Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticate

  Orta 4.3