36619 matches found
EUVD-2026-52584
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
CVE-2026-14816 The GDPR Framework < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
CVE-2026-14816
The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...
PT-2026-73947
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.4.3-tuxcare.1...
PT-2026-75132
TuxCare rebuilt js-cookie to address 1 CVE. Fixed in 2.2.1-tuxcare.1...
PT-2026-74085
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 1.2.0-tuxcare.1...
PT-2026-74024
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.5.0-tuxcare.1...
PT-2026-74928
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.6.0-tuxcare.1...
PT-2026-75499
TuxCare rebuilt tough-cookie to address 2 CVEs. Fixed in 2.2.2-tuxcare.1...
PT-2026-74028
TuxCare rebuilt cookie to address 2 CVEs. Fixed in 0.3.1-tuxcare.1...
PT-2026-74029
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.3-tuxcare.1...
PT-2026-74026
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.0.5-tuxcare.1...
PT-2026-74537
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.3.4-tuxcare.1...
PT-2026-73948
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 3.0.1-tuxcare.1...
PT-2026-74927
TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.4.0-tuxcare.1...
PT-2026-73852
TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 0.12.1-tuxcare.1...
PT-2026-75517
TuxCare rebuilt tough-cookie to address 2 CVEs. Fixed in 2.2.2-tuxcare.2...
PT-2026-67848
Name of the Vulnerable Software and Affected Versions MaxSite CMS affected versions not specified Description An issue exists where unauthenticated attackers can execute arbitrary code by providing malicious serialized data through the maxsite comuser cookie. The application passes this data...
CVE-2026-70554: Deserialization of Untrusted Data
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by passing attacker-controlled serialized data in the maxsitecomuser cookie directly to unserialize without validation or class allowlisting. Attackers can craft a malicious...