WordPress plugin
Complianz GDPR/CCPA Cookie Consent Banner security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 25 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium22
- Low0
All Complianz GDPR/CCPA Cookie Consent Banner vulnerabilities
- High7.2Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter
≤7.5.5Update to 7.5.6
- High7.2Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex
≤7.5.4Update to 7.5.5
- Medium6.4Authenticated (Author+) Server-Side Request Forgery
≤7.5.1Update to 7.5.2
- Medium5.3Unauthenticated Information Exposure
≤7.5.1Update to 7.5.2
- Medium6.6Authenticated (Administrator+) PHP Object Injection
≤7.5.1Update to 7.5.2
- Medium5.3Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint
≤7.4.5Update to 7.4.6
- Medium4.9Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter
≤7.4.4.2Update to 7.4.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤7.4.3Update to 7.4.4
- Medium4.3Cross-Site Request Forgery to Data Request Deletion
≤6.5.6Update to 7.0.0
- Medium4.4Authenticated(Administrator+) Stored Cross-site Scripting via settings
≤6.5.5Update to 6.5.6
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
≤6.4.4Update to 6.4.5
- Medium4.3Cross-Site Request Forgery
≤6.4.5Update to 6.4.6
- Medium4.3Cross-Site Request Forgery
<6.4.6Update to 6.4.6
- Medium4.3GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via cmplz_delete_cookiebanner
≤6.4.4Update to 6.4.5
- Medium4.3GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via maybe_install_suggested_plugins
≤6.4.4Update to 6.4.5
- Medium6.1GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_script_save
≤6.4.4Update to 6.4.5
- Medium4.3GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_create_pages
≤6.4.4Update to 6.4.5
- Medium4.3GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_edit_item
≤6.4.4Update to 6.4.5
- Medium6.1GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_script_add
≤6.4.4Update to 6.4.5
- Medium5.4GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via ajax_delete_snapshot
≤6.4.4Update to 6.4.5
- Medium4.3GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via run_sync
≤6.4.4Update to 6.4.5
- Medium4.3GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via cmplz_duplicate_cookiebanner
≤6.4.4Update to 6.4.5
- Medium6.4GDPR/CCPA Cookie Consent <= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.4.1Update to 6.4.2
- High8.8SQL Injection via Translations
≤6.3.3Update to 6.3.4
- Medium6.1GDPR/CCPA Cookie Consent <= 5.5.2 - Reflected Cross-Site Scripting via s parameter
<6.0.0Update to 6.0.0
Complianz GDPR/CCPA Cookie Consent Banner: common questions
Does Complianz GDPR/CCPA Cookie Consent Banner have known vulnerabilities?
Yes. VulnCrest Radar lists 25 known vulnerabilities in Complianz GDPR/CCPA Cookie Consent Banner: 3 high, 22 medium. None are known to affect version null.
How do I check which version of Complianz GDPR/CCPA Cookie Consent Banner I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Complianz GDPR/CCPA Cookie Consent Banner vulnerability?
CVE-2026-97339, published Oct 15, 2026: Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter. Severity: High (CVSS 7.2).
Is any Complianz GDPR/CCPA Cookie Consent Banner vulnerability listed in CISA KEV?
No. None of the known Complianz GDPR/CCPA Cookie Consent Banner vulnerabilities is currently listed in the CISA KEV catalog.