Skip to content
Wplegalpages vulnerabilities
Newest
-
wplegalpages wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent mode
Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter
CVE-2026-14989
7.2 High
-
wplegalpages wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent mode
WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint
CVE-2026-75865
Public exploit
9.8 Critical
-
wplegalpages wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent mode
Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter
CVE-2026-13360
7.2 High
-
wplegalpages wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent mode
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries
CVE-2026-15136
4.3 Medium
-
wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent
Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action
CVE-2026-12955
4.3 Medium
-
wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent
Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter
CVE-2026-14475
4.9 Medium
-
wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent
Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter
CVE-2026-12920
4.9 Medium
-
wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure
CVE-2025-11754
7.5 High
-
wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
CVE-2025-14061
5.3 Medium
-
wplegalpages privacy policy generator – wplp legal pages
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect
CVE-2025-11816
5.3 Medium
-
wplegalpages privacy policy generator – wplp legal pages
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation
CVE-2025-8565
8.1 High
-
wplegalpages privacy policy generator – wplp legal pages
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.2.7 - Cross-Site Request Forgery
CVE-2024-12636
4.3 Medium
-
wpeka wp cookie consent, wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent +1 more
Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script
CVE-2024-11724
4.3 Medium
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
wpeka wp cookie consent, wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent +1 more
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
CVE-2024-4869
7.2 High
-
wpeka wp cookie consent, wplegalpages cookie banner for gdpr / ccpa – wplp cookie consent +1 more
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
CVE-2024-3599
5.3 Medium
-
wpeka wplegalpages, wplegalpages privacy policy generator – wplp legal pages +1 more
WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4968
5.5 Medium
-
wplegalpages wp legal pages
The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin...
CVE-2015-9428
6.5 Medium