Termly – GDPR/CCPA Cookie Consent Banner

uk-cookie-consent · plugin

Known security vulnerabilities for Termly – GDPR/CCPA Cookie Consent Banner. Find out in seconds which version runs on your site with WP Lens.

2 known vulnerabilities

1 exploitable without logging in · 1 with public exploit code · latest Jun 11, 2024

Listed on wordpress.org · latest 3.3.1 · last updated Jan 9, 2026 · 80K+ installs

wordpress.org status checked on Oct 2, 2026

Vulnerabilities

CVE-2024-35692unauthenticated≤ 3.2
WordPress GDPR/CCPA Cookie Consent Banner plugin <= 3.2 - Broken Access Control vulnerability
High 7.3
CVE-2018-10310login required
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3
Medium 5.4

The access label is read from the record's own text (e.g. “subscriber+”: subscriber and above). When the text names no role, CVSS decides between “login required” and “high privilege”; no role name is invented. “Needs a click”: the attack depends on a logged-in user following a link (CSRF, reflected XSS).

← Back to directory