cookiebot
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Cookiebot | 2 | – | Feb 19, 2026 |
| Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | 1 | – | Mar 6, 2025 |
Exploited and recent CVEs
- CVE-2026-25407 WordPress Cookiebot plugin <= 4.6.4 - Broken Access Control vulnerability 0.2%
- CVE-2025-53197 WordPress Cookiebot plugin <= 4.5.8 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
- CVE-2025-1666 Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission 0.3%