Complianz

Products

ProductCVEsExploitedLatest
Complianz – GDPR/CCPA Cookie Consent5–Apr 29, 2026
Complianz3–Jul 23, 2026
Complianz GDPR/CCPA Cookie Consent Banner2–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-97339 High 7.2 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter 0.3%
  • CVE-2026-83561 High 7.2 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex 0.5%
  • CVE-2026-65498 Medium 5.3 WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-65497 High 7.2 WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-65496 Medium 4.4 WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2026-4019 Medium 5.3 Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint 0.3%
  • CVE-2026-2389 Medium 4.9 Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter 0.2%
  • CVE-2025-11185 Medium 6.4 Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2024-1592 Medium 4.3 Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion 0.2%
  • CVE-2023-6498 Medium 4.4 Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings 0.3%