WordPress security by component

Cookies and Content Security Policy

Plugin description

Cookies and Content Security Policy is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 22, 2026; the highest CVE/CNA score is 5.3.

Plugin slug: cookies-and-content-security-policy

Latest vulnerability

CVE-2025-63019: Cookies and Content Security Policy: A security weakness

Cookies and Content Security Policy is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 22, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 22, 2026	CVE-2025-63019 Cookies and Content Security Policy: A security weakness Cookies and Content Security Policy is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Nov 30, 2023	CVE-2023-40662 Cookies and Content Security Policy: A security weakness Cookies and Content Security Policy is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVD7.5