WP Legal Pages

Products

ProductCVEsExploitedLatest
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent7–Oct 6, 2026
WPLegalPages2–Aug 24, 2026

Exploited and recent CVEs

  • CVE-2026-42636 High 7.1 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-82970 Critical 10.0 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2026-78259 High 7.3 WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability 0.4%
  • CVE-2026-73359 Medium 6.5 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67974 High 7.5 WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-66080 Medium 5.3 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-66133 Medium 5.3 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerability 0.3%
  • CVE-2025-66075 Medium 4.3 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-49285 Medium 4.3 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%