4.3
Moyenne
CVE-2026-16613 The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable…
Description
The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable without authentication and performs no request-origin check, allowing an attacker to log any user out and delete the site's cookies by luring them to a crafted link.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GDPR Cookie Compliance 5.1 | premières → < 5.1.0 | 5.1.0 |
Autres CVE de GDPR Cookie Compliance
Les 7 CVE de GDPR Cookie Compliance →
CVE-2025-1624
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
3.5
Faible
CVE-2025-1623
The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which…
3.5
Faible
CVE-2025-1621
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
4.8
Moyenne
CVE-2025-1622
The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which…
3.5
Faible