Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:cookie_consent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductCookie Consent (72472148-2de9-5b33-b866-3b67ddb48224)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18046 vulnerable 2026-09-16 04:34:01.572609 Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update
The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores its geolocation service license key, so the route falls back to an authentication-only gate, allowing any authenticated user such as a subscriber to overwrite the stored key and disrupt the Cookie Consent WordPress plugin before 0.0.10's geolocation-based consent banner targeting.
Published: 2026-08-12T06:00:16.458Z
Updated: 2026-08-12T17:14:50.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15388 vulnerable 2026-09-16 04:33:06.597520 Cookie Consent < 0.0.10 - Subscriber+ Consent Settings Update and Consent Log Disclosure
The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall back to an authentication-only gate, allowing any authenticated user such as a subscriber to update the Cookie Consent WordPress plugin before 0.0.10's consent settings and, on sites connected to the vendor's paid plan, read stored visitor consent logs.
Published: 2026-08-12T06:00:14.468Z
Updated: 2026-08-12T19:32:05.878Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.