This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-4013 | BDVDB-2026-210648 Detail

GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent)

Description#

The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-352 Cross-Site Request Forgery (CSRF)

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.