Log in Start free

wplegalpages

Products

ProductCVEsExploitedLatest
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent8–Jul 10, 2026
Privacy Policy Generator – WPLP Legal Pages4–Nov 1, 2025
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode4–Sep 9, 2026

Exploited and recent CVEs

  • CVE-2026-14989 High 7.2 Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter 0.5%
  • CVE-2026-75865 Critical 9.8 WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint 0.9%
  • CVE-2026-13360 High 7.2 Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter 0.4%
  • CVE-2026-15136 Medium 4.3 Cookie Banner for GDPR / CCPA – WPLP Cookie Consent <= 4.3.7 - Cross-Site Request Forgery via Bulk Action to Delete/Resolve Entries 0.2%
  • CVE-2026-12955 Medium 4.3 Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification via gcc_save_schedule_scan AJAX Action 0.3%
  • CVE-2026-14475 Medium 4.9 Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter 0.5%
  • CVE-2026-12920 Medium 4.9 Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter 0.5%
  • CVE-2025-11754 High 7.5 Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure 0.4%
  • CVE-2025-14061 Medium 5.3 Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion 0.3%
  • CVE-2025-11816 Medium 5.3 Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect 0.3%
  • CVE-2025-8565 High 8.1 Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation 0.3%
  • CVE-2024-12636 Medium 4.3 Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.2.7 - Cross-Site Request Forgery 0.2%
  • CVE-2024-11724 Medium 4.3 Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script 0.3%
  • CVE-2024-4869 High 7.2 WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header 0.4%
  • CVE-2024-3599 Medium 5.3 WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion 0.5%
  • CVE-2023-4968 Medium 5.5 WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode 0.5%