← WordPress Vulnerabilities
WordPress security by component

GDPR Cookie Compliance

GDPR Cookie Compliance is a WordPress component with 9 published CVE records in this archive. The latest tracked vulnerability was published Mar 16, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: gdpr-cookie-compliance

CVE-2025-1624: GDPR Cookie Compliance: Cross-site scripting

GDPR Cookie Compliance is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedMar 16, 2025
Safe version guidanceSee mitigation notes
Safe version
Mar 16, 2025 CVE-2025-1624
GDPR Cookie Compliance: Cross-site scripting
GDPR Cookie Compliance is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE3.5
NVDPending
Mar 16, 2025 CVE-2025-1623
GDPR Cookie Compliance: Cross-site scripting
GDPR Cookie Compliance is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE3.5
NVDPending
Mar 16, 2025 CVE-2025-1622
GDPR Cookie Compliance: Cross-site scripting
GDPR Cookie Compliance is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE3.5
NVDPending
Mar 16, 2025 CVE-2025-1621
GDPR Cookie Compliance: Cross-site scripting
GDPR Cookie Compliance is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.8
NVDPending
Mar 16, 2025 CVE-2025-1620
GDPR Cookie Compliance: Cross-site scripting
GDPR Cookie Compliance is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.8
NVDPending
Mar 16, 2025 CVE-2025-1619
GDPR Cookie Compliance: Cross-site scripting
GDPR Cookie Compliance is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.8
NVDPending
Mar 12, 2025 CVE-2025-2205
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD: Cross-site scripting
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.4
NVD4.8
Aug 30, 2023 CVE-2023-4013
GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent): Cross-site request forgery
GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE6.5
NVD6.5
Jun 07, 2023 CVE-2019-25143
GDPR Cookie Compliance: A security weakness
GDPR Cookie Compliance is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVD4.3