CVE-2024-3599

CVE-2024-3599 affects WP Cookie Consent for WordPress (up to v3.0.2). Root cause: missing capability check in gdpr_policy_process_delete(). Vulnerability allows unauthenticated deletion of arbitrary posts. Remediation: upgrade to a version higher than 3.0.2 or apply vendor patch (details in conne...

CVE-2024-11724

CVE-2024-11724 concerns the WordPress plugin Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (GDPR/CCPA/ePrivacy). The issue is described as a missing capability check on the wpl_script_save AJAX action in all versions up to and including 3.6.5, enabling authen...

CVE-2024-4869

Based on the CVE entry CVE-2024-4869 and corroborating sources, the WP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Client-IP header in all versions up to 3.2.0 due to insufficient input sanitization and output escaping. The vulnerability can allow an u...

CVE-2023-23678

CVE-2023-23678 affects the WordPress plugin WP Cookie Notice for GDPR/CCPA/ePrivacy (WP Cookie Consent). The issue is CSV Injection due to improper neutralization of formula elements in CSV files generated by the plugin up to version 2.2.5. A fix was released in 2.2.6. Remediation: upgrade to 2.2...