Complianz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Complianz – GDPR/CCPA Cookie Consent | 5 | – | Apr 29, 2026 |
| Complianz | 3 | – | Jul 23, 2026 |
| Complianz GDPR/CCPA Cookie Consent Banner | 2 | – | Oct 16, 2026 |
Exploited and recent CVEs
- CVE-2026-97339 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter 0.3%
- CVE-2026-83561 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex 0.5%
- CVE-2026-65498 WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-65497 WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability 0.5%
- CVE-2026-65496 WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2026-4019 Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint 0.3%
- CVE-2026-2389 Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter 0.2%
- CVE-2025-11185 Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
- CVE-2024-1592 Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion 0.2%
- CVE-2023-6498 Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings 0.3%