Vulnerabilities / GDPR Cookie Consent & Compliance Notice
GDPR Cookie Consent & Compliance Notice vulnerabilities
Advisories WPSec published for CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice). Other sources may list more. Its attack surface: GDPR Cookie Consent & Compliance Notice on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-28 | WPSEC-2026-1824 | GDPR Cookie Consent & Compliance Notice <= 3.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cookie Category Scripts | Medium 6.4 | 3.5.8 |
| 2026-10-28 | WPSEC-2026-1823 | GDPR Cookie Consent & Compliance Notice <= 3.5.7 - Unauthenticated Cookie Consent Bypass via 'cli_bypass' Parameter | Medium 4.3 | 3.5.8 |
License: CC BY 4.0