4.3
Medium
CVE-2026-16613 The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable…
Description
The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable without authentication and performs no request-origin check, allowing an attacker to log any user out and delete the site's cookies by luring them to a crafted link.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GDPR Cookie Compliance 5.1 | earliest → < 5.1.0 | 5.1.0 |
Other CVEs of GDPR Cookie Compliance
The 7 CVEs of GDPR Cookie Compliance →
CVE-2025-1624
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
3.5
Low
CVE-2025-1623
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
3.5
Low
CVE-2025-1621
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
4.8
Medium
CVE-2025-1622
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
3.5
Low