wplegalpages vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20245
3. 20253
4. 20268

Newest CVEs

• CVE-2026-14989

  Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter

  wplegalpages · WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

  High7.2
• CVE-2026-75865

  WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

  wplegalpages · WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

  Critical9.8
• CVE-2026-13360

  Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter

  wplegalpages · WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

  High7.2
• CVE-2026-15136

  Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries

  wplegalpages · WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

  Medium4.3
• CVE-2026-12955

  Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action

  wplegalpages · Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

  Medium4.3
• CVE-2026-14475

  Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter

  wplegalpages · Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

  Medium4.9
• CVE-2026-12920

  Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  wplegalpages · Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

  Medium4.9
• CVE-2025-11754

  Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure

  wplegalpages · Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

  High7.5
• CVE-2025-14061

  Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

  wplegalpages · Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

  Medium5.3
• CVE-2025-11816

  Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect

  wplegalpages · Privacy Policy Generator – WPLP Legal Pages

  Medium5.3