1354 matches found
CVE-2022-0147
The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-0147
The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
Cross site scripting
The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-0147
The CVE describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin “Cookie Information / Free GDPR Consent Solution” prior to version 2.0.8. The issue arises because user data is not escaped before being output in admin-dashboard attributes, enabling script injection in the ...
PT-2022-12995
Name of the Vulnerable Software and Affected Versions The Cookie Information | Free GDPR Consent Solution WordPress plugin versions prior to 2.0.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly escape user data before...
WordPress plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Cookie Information | Free GDPR Consent Solution plugin prior to version 2.0.8 is vulnerable to A cross-site scripting vulnerability...
CVE-2022-0147: Improper Neutralization of Input During Web Page Generation
The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-0445
The WordPress Real Cookie Banner: GDPR DSGVO & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack...
PT-2022-13189
Name of the Vulnerable Software and Affected Versions The WordPress Real Cookie Banner: GDPR DSGVO & ePrivacy Cookie Consent WordPress plugin versions prior to 2.14.2 Description The issue concerns a lack of CSRF checks when resetting settings, allowing attackers to manipulate logged-in admins in...
CVE-2022-0445: Cross-Site Request Forgery (CSRF)
The WordPress Real Cookie Banner: GDPR DSGVO & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack...
Microsoft shares 4 challenges of protecting sensitive data and how to overcome them
Breaches of sensitive data are extremely costly for organizations when you tally data loss, stock price impact, and mandated fines from violations of General Data Protection Regulation GDPR, California Consumer Privacy Act CCPA, or other regulations. They also can diminish the trust of those who...
WordPress Complianz - GDPR/CCPA Cookie Consent Plugin < 6.0.0 XSS Vulnerability
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
WordPress Cookii – Free GDPR Cookie Consent plugin <= 3.0.2 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Cookii – Free GDPR Cookie Consent plugin versions = 3.0.2. Solution No patched version available...
WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin < 0.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin versions 0.9. Solution Update the WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin to the latest available version...
WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin <= 17.5.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin versions = 17.5.2. Solution Update the WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin to the latest available version at least...
WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin < 0.9 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin versions 0.9. Solution Update the WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin to the latest available version at least 0.9...
WordPress "WordPress YouTube, Vimeo and more elements security Plugin (GDPR)" plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress "WordPress YouTube, Vimeo and more elements security Plugin GDPR" plugin versions = 1.2. Solution No patched version available...
WordPress Cookii – Free GDPR Cookie Consent plugin <= 3.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Cookii – Free GDPR Cookie Consent plugin versions = 3.0.2. Solution No patched version available...
WordPress TK Google Fonts GDPR Compliant plugin <= 2.2.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress TK Google Fonts GDPR Compliant plugin versions = 2.2.0. Solution Update the WordPress TK Google Fonts GDPR Compliant plugin to the latest available version at least 2.2.1...
WordPress TK Google Fonts GDPR Compliant plugin <= 2.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress TK Google Fonts GDPR Compliant plugin versions = 2.2.0. Solution Update the WordPress TK Google Fonts GDPR Compliant plugin to the latest available version at least 2.2.1...