Devowl

Wordpress Real Cookie Banner

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2025-1485

Exploit
  • EPSS 0.05%
  • Veröffentlicht 02.06.2025 06:15:20
  • Zuletzt bearbeitet 09.06.2025 20:51:37

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent WordPress plugin before 5.1.6, real-cookie-banner-pro WordPress plugin before 5.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf...

5.4

CVE-2022-4507

Exploit
  • EPSS 0.25%
  • Veröffentlicht 16.01.2023 16:15:13
  • Zuletzt bearbeitet 21.11.2024 07:35:24

The Real Cookie Banner WordPress plugin before 3.4.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scr...

6.5

CVE-2022-0445

Exploit
  • EPSS 0.14%
  • Veröffentlicht 07.03.2022 09:15:09
  • Zuletzt bearbeitet 21.11.2024 06:38:38

The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack