Not rated
CVE-2022-0445 The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have…
Description
The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent 2.14 | earliest → < 2.14.2 | 2.14.2 |