Gdpr Ccpa Compliance & Cookie Consent Banner
Approved changes feed: RSS · Atom
cpe:2.3:a:ninjateam:gdpr_ccpa_compliance_&_cookie_consent_banner:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ninjateam (60f12742-896a-5f99-ac58-783aeff1a80d) |
|---|---|
| Product | Gdpr Ccpa Compliance & Cookie Consent Banner (f85003cc-5f76-59f2-b722-31f93187002e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5607 |
vulnerable | 2026-06-03 14:57:53.389858 |
GDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
MEDIUM (5.4)
The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings() in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings, update page content, send arbitrary emails and inject malicious web scripts.
Published: 2024-06-07T02:39:28.634Z
Updated: 2026-04-08T17:17:54.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36718 |
vulnerable | 2026-06-03 14:42:39.780833 |
GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection
CRITICAL (9.8)
The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deserialization of untrusted input "njt_gdpr_allow_permissions" value. This allows unauthenticated attackers to inject a PHP Object.
Published: 2023-06-07T01:51:35.736Z
Updated: 2026-04-08T17:12:40.753Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.