Complianz vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20268

Newest CVEs

• CVE-2026-97339

  Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter

  complianz · Complianz GDPR/CCPA Cookie Consent Banner

  High7.2
• CVE-2026-83561

  Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex

  complianz · Complianz GDPR/CCPA Cookie Consent Banner

  High7.2
• CVE-2026-65498

  WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability

  Complianz · Complianz

  Medium5.3
• CVE-2026-65497

  WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability

  Complianz · Complianz

  High7.2
• CVE-2026-65496

  WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability

  Complianz · Complianz

  Medium4.4
• CVE-2026-4019

  Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint

  complianz · Complianz – GDPR/CCPA Cookie Consent

  Medium5.3
• CVE-2026-2389

  Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter

  complianz · Complianz – GDPR/CCPA Cookie Consent

  Medium4.9
• CVE-2025-11185

  Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  complianz · Complianz – GDPR/CCPA Cookie Consent

  Medium6.4
• CVE-2024-1592

  Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion

  complianz · Complianz – GDPR/CCPA Cookie Consent

  Medium4.3
• CVE-2023-6498

  Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings

  complianz · Complianz – GDPR/CCPA Cookie Consent

  Medium4.4