Skip to content
OpenAdvisories

Vendor

Complianz

10 known vulnerabilities.

Products

Complianz – GDPR/CCPA Cookie Consent 5 Complianz 3 Complianz GDPR/CCPA Cookie Consent Banner 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-65498

    WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.

    Complianz Complianz
  • Medium 4.4
    CVE-2026-65496

    WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability

    Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions.

    Complianz Complianz
  • Medium 5.3
    CVE-2026-4019

    Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint

    The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the REST API endpoint at /wp-json/complianz/v1/consent-area/{post_id}/{block_id} using __return_…

    Complianz Complianz – GDPR/CCPA Cookie Consent Web / CMS
  • Medium 4.9
    CVE-2026-2389

    Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter

    The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.4.2. This is due to the `revert_divs_to_summary` function replacing `&#8221;` HTML entities with literal doubl…

    Complianz Complianz – GDPR/CCPA Cookie Consent Web / CMS
  • Medium 6.4
    CVE-2025-11185

    Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient input sanitization and output escaping on u…

    Complianz Complianz – GDPR/CCPA Cookie Consent Web / CMS
  • Medium 4.3
    CVE-2024-1592

    Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion

    The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5.6. This is due to missing or incorrect nonce validation on the process_delete function in class-DNSMPD.php. Thi…

    Complianz Complianz – GDPR/CCPA Cookie Consent Web / CMS
  • Medium 4.4
    CVE-2023-6498

    Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings

    The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 6.5.5 due to insufficient input sanitization and output escaping. This makes it possible for auth…

    Complianz Complianz – GDPR/CCPA Cookie Consent Web / CMS