Skip to content
Unknown Cookie Consent vulnerabilities
-
iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more, unknown iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more +1 more
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content via IUB-COOKIE-BLOCK Marker
CVE-2026-120540
7.2 High
-
unknown iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more
iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser
CVE-2026-86606
7.5 High
-
unknown wplp cookie consent
WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs
CVE-2026-85130
8.8 High
-
unknown wplp cookie consent
WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF
CVE-2026-85131
6.5 Medium
-
unknown wplp cookie consent
WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions
CVE-2026-85133
5.4 Medium
-
unknown wplp cookie consent
WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan
CVE-2026-85132
4.3 Medium
-
unknown wplp cookie consent
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset
CVE-2026-82185
4.3 Medium
-
unknown wplp cookie consent
WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update
CVE-2026-82184
5.3 Medium
-
iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more, unknown iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more +1 more
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content
CVE-2026-77263
7.2 High
-
iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more, unknown iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more +1 more
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite
CVE-2026-77233
7.2 High
-
unknown wplp cookie consent
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
CVE-2026-82186
4.1 Medium
-
termly cookie consent
Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update
CVE-2026-18046
4.3 Medium
-
termly cookie consent
Cookie Consent < 0.0.10 - Subscriber+ Consent Settings Update and Consent Log Disclosure
CVE-2026-15388
4.3 Medium
-
devowl real cookie banner: gdpr & eprivacy cookie consent, unknown real-cookie-banner-pro, devowl wordpress real cookie banner +2 more
Real Cookie Banner < 5.1.6 - Admin+ Stored XSS
CVE-2025-1485
4.8 Medium
-
mooveagency gdpr cookie compliance, unknown gdpr cookie compliance (ccpa, dsgvo, cookie consent) +1 more
GDPR Cookie Compliance < 4.12.5 - License Update/Deactivation via CSRF
CVE-2023-4013
6.5 Medium
-
devowl wordpress real cookie banner, unknown real cookie banner: gdpr (dsgvo) & eprivacy cookie consent +1 more
Real Cookie Banner < 3.4.10 - Contributor+ Stored XSS
CVE-2022-4507
5.4 Medium
-
iubenda iubenda-cookie-law-solution, unknown iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more +1 more
iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin
CVE-2022-3911
8.8 High
-
beautiful-cookie-banner beautiful cookie consent banner
Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
CVE-2022-3823
4.8 Medium
-
really-simple-plugins complianz, unknown complianz premium, complianz – gdpr/ccpa cookie consent +1 more +3 more
Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi
CVE-2022-3494
8.8 High
-
devowl wordpress real cookie banner, unknown wordpress real cookie banner: gdpr (dsgvo) & eprivacy cookie consent +1 more
WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF
CVE-2022-0445
6.5 Medium
-
really-simple-plugins complianz, complianz – gdpr/ccpa cookie consent, unknown complianz – gdpr/ccpa cookie consent +2 more
Complianz - GDPR/CCPA Cookie Consent < 6.0.0 - Reflected Cross-Site Scripting
CVE-2022-0193
6.1 Medium