Skip to content
Wpeka vulnerabilities
Newest
-
wpeka wp adcenter
WordPress WP AdCenter plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62984
6.5 Medium
-
wpeka wp adcenter
WordPress WP AdCenter plugin <= 2.6.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53278
6.5 Medium
-
wpeka wp adcenter
WordPress WP AdCenter plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31860
6.5 Medium
-
wpeka wp cookie consent, wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent +1 more
Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script
CVE-2024-11724
4.3 Medium
-
wpeka wp adcenter, wpeka-club wp adcenter – ad manager & adsense ads +1 more
WP AdCenter – Ad Manager & Adsense Ads <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode
CVE-2024-10113
6.4 Medium
-
wpeka wp adcenter, wpeka-club wp adcenter – ad manager & adsense ads +1 more
WP AdCenter – Ad Manager & Adsense Ads <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute
CVE-2024-8317
6.4 Medium
-
wpeka wp cookie consent, wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent +1 more
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
CVE-2024-4869
7.2 High
-
wpeka wp cookie consent, wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent +1 more
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
CVE-2024-3599
5.3 Medium
-
wpeka wp cookie consent, wpeka-club wp cookie consent ( for gdpr, ccpa & eprivacy ) +1 more
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injection
CVE-2023-23678
4.0 Medium
-
wpeka wplegalpages, wplegalpages privacy policy generator – wplp legal pages +1 more
WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4968
5.5 Medium
-
unknown privacy policy generator, terms & conditions generator wordpress plugin : wplegalpages, wpeka wplegalpages +1 more
WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS
CVE-2021-25106
5.4 Medium