Known vulnerabilities in the Gdpr Cookie Consent plugin
22 security advisories have been published for the Gdpr Cookie Consent plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Gdpr Cookie Consent - Cross-Site Scripting (XSS) (CVE-2026-14989) HIGH
- Gdpr Cookie Consent - Remote Code Execution (CVE-2026-75865) CRITICAL
- Gdpr Cookie Consent - Arbitrary File Upload (CVE-2026-82970) CRITICAL
- Gdpr Cookie Consent - Cross-Site Scripting (XSS) (CVE-2026-73359) MEDIUM
- Gdpr Cookie Consent - Cross-Site Scripting (XSS) (CVE-2026-13360) HIGH
- Gdpr Cookie Consent - Cross-Site Request Forgery (CSRF) (CVE-2026-15136) MEDIUM
- Gdpr Cookie Consent - SQL Injection (CVE-2026-14475) MEDIUM
- Gdpr Cookie Consent - Broken Access Control (CVE-2026-12955) MEDIUM
- Gdpr Cookie Consent - SQL Injection (CVE-2026-12920) MEDIUM
- Gdpr Cookie Consent - Broken Access Control (CVE-2025-11754) HIGH
- Gdpr Cookie Consent - Broken Access Control (CVE-2025-66080) MEDIUM
- Gdpr Cookie Consent - Broken Access Control (CVE-2025-14061) MEDIUM
- Gdpr Cookie Consent - Broken Access Control (CVE-2025-66133) MEDIUM
- Gdpr Cookie Consent - Broken Access Control (CVE-2025-66075) MEDIUM
- Gdpr Cookie Consent - Cross-Site Request Forgery (CSRF) (CVE-2025-49285) MEDIUM
- Gdpr Cookie Consent - Cross-Site Request Forgery (CSRF) (CVE-2024-8286) MEDIUM
- Gdpr Cookie Consent - Cross-Site Scripting (XSS) (CVE-2024-8397) MEDIUM
- Gdpr Cookie Consent - Broken Access Control (CVE-2024-11724) MEDIUM
- Gdpr Cookie Consent - Cross-Site Scripting (XSS) (CVE-2024-4869) HIGH
- Gdpr Cookie Consent - Broken Access Control (CVE-2024-3599) MEDIUM
- Gdpr Cookie Consent - Cross-Site Scripting (XSS) (CVE-2023-49191) MEDIUM
- Gdpr Cookie Consent - Privilege Escalation (CVE-2020-20633) MEDIUM