Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

complianz — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting complianz. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Complianz is a WordPress plugin designed to help websites comply with privacy regulations like GDPR by managing cookie consent banners. Historically, the plugin has been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These flaws often stemmed from insufficient input validation and improper access controls. In 2023, Complianz addressed critical vulnerabilities that could allow attackers to bypass security measures and potentially gain unauthorized access to website functions. The plugin's security track record highlights the ongoing challenges in balancing compliance features with robust security implementation in widely used web extensions.

CVE ID Title CVSS Severity Published
CVE-2026-83561 Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex — Complianz GDPR/CCPA Cookie Consent Banner CWE-79 7.2 High 2026-09-18
CVE-2026-65498 WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability — Complianz CWE-497 5.3 Medium 2026-07-23
CVE-2026-65497 WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability — Complianz CWE-502 7.2 High 2026-07-23
CVE-2026-65496 WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability — Complianz CWE-918 4.4 Medium 2026-07-23
CVE-2026-4019 Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint — Complianz – GDPR/CCPA Cookie Consent CWE-862 5.3 Medium 2026-04-29
CVE-2026-2389 Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter — Complianz – GDPR/CCPA Cookie Consent CWE-79 4.9 Medium 2026-03-26
CVE-2025-11185 Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Complianz – GDPR/CCPA Cookie Consent CWE-79 6.4 Medium 2026-02-18
CVE-2024-1592 Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion — Complianz – GDPR/CCPA Cookie Consent CWE-352 4.3 Medium 2024-03-02
CVE-2023-6498 Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings — Complianz – GDPR/CCPA Cookie Consent CWE-79 4.4 Medium 2024-01-04

This page lists every published CVE security advisory associated with complianz. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.