| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-1620 | GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS | Unknown | GDPR Cookie Compliance | 中危 | - | 2025-03-16 06:00:09 | Deep Dive |
| CVE-2025-1619 | GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS | Unknown | GDPR Cookie Compliance | 中危 | - | 2025-03-16 06:00:08 | Deep Dive |
| CVE-2025-2205 | GDPR Cookie Compliance <= 4.15.6 - Authenticated (Admin+) Stored Cross-Site Scripting | mooveagency | GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | Medium | 4.4 | 2025-03-12 03:21:27 | Deep Dive |
| CVE-2025-1666 | Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission | cookiebot | Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode | Medium | 4.3 | 2025-03-06 11:11:02 | Deep Dive |
| CVE-2025-25113 | WordPress Implied Cookie Consent plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability | Senktec | Implied Cookie Consent | High | 7.1 | 2025-03-03 13:30:24 | Deep Dive |
| CVE-2024-13849 | Cookie Notice Bar <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting | dcurasi | Cookie Notice Bar | Medium | 5.5 | 2025-02-20 09:21:37 | Deep Dive |
| CVE-2025-22656 | WordPress Cookie Monster Plugin <= 1.2.2 - Local File Inclusion vulnerability | Oscar Alvarez | Cookie Monster | High | 8.1 | 2025-02-18 19:54:28 | Deep Dive |
| CVE-2025-24547 | WordPress Caching Compatible Cookie Opt-In plugin <= 0.0.10 - Stored Cross Site Scripting (XSS) vulnerability | matthias.wagner | Caching Compatible Cookie Opt-In and JavaScript | Medium | 6.5 | 2025-01-24 17:24:24 | Deep Dive |
| CVE-2025-23815 | WordPress root Cookie plugin <= 1.6 - CSRF to Stored XSS vulnerability | linickx | root Cookie | High | 7.1 | 2025-01-16 20:08:16 | Deep Dive |
| CVE-2025-23501 | WordPress Cookie Consent & Autoblock for GDPR/CCPA plugin <= 1.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability | SpruceJoy | Cookie Consent & Autoblock for GDPR/CCPA | High | 7.1 | 2025-01-16 20:06:08 | Deep Dive |
| CVE-2025-23434 | WordPress Easy EU Cookie law plugin <= 1.3.3.1 - Stored Cross Site Scripting (XSS) vulnerability | viher3 | Easy EU Cookie law | 中危 | - | 2025-01-16 20:06:01 | Deep Dive |
| CVE-2025-22578 | WordPress WP Cookie plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability | aazztech | WP Cookie | Medium | 5.9 | 2025-01-07 14:57:08 | Deep Dive |
| CVE-2024-11724 | Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script | wplegalpages | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | Medium | 4.3 | 2024-12-12 06:46:35 | Deep Dive |
| CVE-2024-53755 | WordPress Third Party Cookie Eraser plugin <= 1.0.2 - CSRF to Cross Site Scripting (XSS) vulnerability | Andrea Pernici | Third Party Cookie Eraser | High | 7.1 | 2024-12-02 13:48:35 | Deep Dive |
| CVE-2024-51933 | WordPress Cookie Nonsense for YT plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability | dozyde | Cookie Nonsense for YT | Medium | 6.5 | 2024-11-19 16:30:51 | Deep Dive |
| CVE-2024-49220 | WordPress Cookie Scanner plugin <= 1.1 - CSRF to Stored XSS vulnerability | Nikel | Cookie Scanner | - | - | 2024-10-17 18:05:59 | Deep Dive |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | dashlabsltd | YASR – Yet Another Star Rating Plugin for WordPress | Medium | 6.3 | 2024-10-16 06:43:30 | Deep Dive |
| CVE-2024-47764 | cookie accepts cookie name, path, and domain with out of bounds characters | jshttp | cookie | 低危 | - | 2024-10-04 19:09:47 | Deep Dive |
| CVE-2022-3399 | Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting | humanityco | Cookie Notice & Compliance for GDPR / CCPA | Medium | 4.4 | 2024-08-16 02:31:26 | Deep Dive |
| CVE-2024-37557 | WordPress WP Cookie Law Info plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability | Soham Web Solution | WP Cookie Law Info | Medium | 5.9 | 2024-07-21 06:52:18 | Deep Dive |