Approved changes feed: RSS · Atom

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorCookieinformation (54e967aa-d0a0-5e73-918e-6752bbeaeca5)
ProductWp Gdpr Compliance (b6a8212f-6ec9-5ff0-8b24-da0626882bdc)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6700 vulnerable 2026-06-08 06:21:55.327790 Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update
HIGH (8.8)
The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level access or higher, to edit arbitrary site options which can be used to create administrator accounts.
Published: 2024-02-05T21:21:41.583Z
Updated: 2026-04-08T16:48:57.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0147 vulnerable 2026-06-08 05:39:09.338349 Cookie Information < 2.0.8 - Reflected Cross-Site Scripting
The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
Published: 2022-03-14T14:41:17.000Z
Updated: 2024-08-02T23:18:41.797Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.