What’s Vulnerable › Products
Complianz – GDPR/CCPA Cookie Consent vulnerabilities
14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your Complianz – GDPR/CCPA Cookie Consent version is affected
Latest Complianz – GDPR/CCPA Cookie Consent vulnerabilities
- CVE-2026-65498 — WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2026-65497 — WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability (CVSS 7.2)
- CVE-2026-65496 — WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4)
- CVE-2026-4019 — Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint (CVSS 5.3)
- CVE-2026-2389 — Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter (CVSS 4.9)
- CVE-2025-11185 — Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- CVE-2024-31229 — WordPress Really Simple SSL plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.5)
- CVE-2024-1592 — Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion (CVSS 4.3)
- CVE-2023-6498 — Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings (CVSS 4.8)
- CVE-2023-34030 — WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF) (CVSS 8.8)
- CVE-2023-33333 — WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) (CVSS 8.8)
- CVE-2023-1069 — Complianz - GDPR/CCPA Cookie Consent < 6.4.2 - Contributor+ Stored XSS (CVSS 5.4)
- CVE-2022-3494 — Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi (CVSS 8.8)
- CVE-2022-0193 — Complianz - GDPR/CCPA Cookie Consent < 6.0.0 - Reflected Cross-Site Scripting (CVSS 6.1)