← WordPress Vulnerabilities
WordPress security by component

EUCookieLaw

EUCookieLaw is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 09, 2025; the highest CVE/CNA score is 5.9.

Plugin slug: eucookielaw

CVE-2025-3897: EUCookieLaw: Filesystem traversal

EUCookieLaw is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedMay 09, 2025
Safe version guidanceSee mitigation notes
Safe version
May 09, 2025 CVE-2025-3897
EUCookieLaw: Filesystem traversal
EUCookieLaw is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE5.9
NVDPending