WordPress plugin

tarteaucitron.io – Cookie Banner & GDPR Consent Management security & vulnerabilities

Q: Is any tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerability listed in CISA KEV?

No. None of the known tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerabilities is currently listed in the CISA KEV catalog.

tarteaucitronjs— active installsLast vulnerability May 28, 2025

No known unpatched vulnerabilities in the latest version

All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

3Known vulnerabilities

Critical0
High1
Medium1
Low1

Vulnerabilities per year

All tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerabilities

tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.9.4Update to 1.9.5	CVE-2025-4955	May 28, 2025
Low3.4	Cross-Site Scripting ≤1.6Update to 1.6.1	CVE-2021-36889	Dec 17, 2021
High8.8	Cross-Site Request Forgery to Cross-Site Scripting ≤1.5.4Update to 1.6	CVE-2021-36887	Dec 9, 2021

Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.9.4Update to 1.9.5
CVE-2025-4955May 28, 2025
Low3.4
Cross-Site Scripting
≤1.6Update to 1.6.1
CVE-2021-36889Dec 17, 2021
High8.8
Cross-Site Request Forgery to Cross-Site Scripting
≤1.5.4Update to 1.6
CVE-2021-36887Dec 9, 2021

tarteaucitron.io – Cookie Banner & GDPR Consent Management: common questions

Does tarteaucitron.io – Cookie Banner & GDPR Consent Management have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in tarteaucitron.io – Cookie Banner & GDPR Consent Management: 1 high, 1 medium, 1 low. None are known to affect version null.

How do I check which version of tarteaucitron.io – Cookie Banner & GDPR Consent Management I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerability?

CVE-2025-4955, published May 28, 2025: tarteaucitron.io <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).

Is any tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerability listed in CISA KEV?

No. None of the known tarteaucitron.io – Cookie Banner & GDPR Consent Management vulnerabilities is currently listed in the CISA KEV catalog.