3.5
Low
CVE-2025-1623 The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
Description
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GDPR Cookie Compliance 4.15 | earliest → < 4.15.9 | 4.15.9 |
Other CVEs of GDPR Cookie Compliance
The 7 CVEs of GDPR Cookie Compliance →
CVE-2026-16613
The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable…
4.3
Medium
CVE-2025-1624
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
3.5
Low
CVE-2025-1621
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
4.8
Medium
CVE-2025-1622
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
3.5
Low