Approved changes feed: RSS · Atom

cpe:2.3:a:tarteaucitron.js_-_cookies_legislation_\&_gdpr_project:tarteaucitron.js_-_cookies_legislation_\&_gdpr:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorTarteaucitron.Js Cookies Legislation & Gdpr Project (75460fab-788c-5db9-bc5c-0d0a87a60f1b)
ProductTarteaucitron.Js Cookies Legislation & Gdpr (f3499524-f3df-5a60-8fd5-8c360e569a3d)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/tarteaucitronjs purl2cpe 2026-10-12 21:12:01.208388

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36889 vulnerable 2026-06-08 05:32:52.667448 WordPress tarteaucitron.js – Cookies legislation & GDPR plugin <= 1.6 - Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities
LOW (3.4)
Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).
Published: 2021-12-20T20:08:22.410Z
Updated: 2026-04-28T16:07:36.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36887 vulnerable 2026-06-08 05:32:52.664861 WordPress tarteaucitron.js – Cookies legislation & GDPR plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS)
MEDIUM (6.1)
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass".
Published: 2021-12-20T20:08:23.332Z
Updated: 2026-04-28T16:07:36.669Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.