CVE-2026-97640

The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance GDPR / CCPA / EU Compliance Cookie Notice plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration mXSS in all versions up to, and including, 1.1.9 d...

CVE-2026-97640 WPConsent <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS)

The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance GDPR / CCPA / EU Compliance Cookie Notice plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration mXSS in all versions up to, and including, 1.1.9 d...

CVE-2026-97640

The WPConsent WordPress plugin (versions up to and including 1.1.9 ) is vulnerable to Stored Cross-Site Scripting (XSS) via mXSS in the comment content. The root cause is insufficient input sanitization and output escaping within the Simple HTML DOM Parser during Noise-Key Restoration. An unauthe...

EUVD-2026-102799

The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance GDPR / CCPA / EU Compliance Cookie Notice plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration mXSS in all versions up to, and including, 1.1.9 d...

WordPress WPConsent plugin <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS) vulnerability

Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration mXSS vulnerability discovered by daroo in WordPress Plugin WPConsent versions = 1.1.9...