Skip to content
OpenAdvisories

Vendor

WP Legal Pages

25 known vulnerabilities.

Products

Cookie Banner for GDPR / CCPA – WPLP Cookie Consent 8 WP Cookie Notice for GDPR, CCPA & ePrivacy Consent 7 Privacy Policy Generator – WPLP Legal Pages 4 WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode 4 WPLegalPages 2
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42636

    WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.

    WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
  • High 7.2
    CVE-2026-14989

    Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter

    The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpl_user_preference' parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output esc…

    WP Legal Pages WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode Web / CMS
  • High 7.3
    CVE-2026-78259

    WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability

    Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

    WP Legal Pages WPLegalPages
  • High 7.2
    CVE-2026-13360

    Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter

    The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regionArray' parameter in all versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. T…

    WP Legal Pages WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode Web / CMS
  • High 7.5
    CVE-2025-67974

    WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through <= 3.5.4.

    WP Legal Pages WPLegalPages
  • High 7.5
    CVE-2025-11754

    Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure

    The GDPR Cookie Consent plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gdpr/v1/settings' REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated att…

    WP Legal Pages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent Web / CMS
  • High 8.1
    CVE-2025-8565

    Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation

    The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the wplp_gdpr_install_plugin_ajax_handler() function i…

    WP Legal Pages Privacy Policy Generator – WPLP Legal Pages Web / CMS
  • High 7.2
    CVE-2024-4869

    WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header

    The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes…

    WP Legal Pages Cookie Banner for GDPR / CCPA – WPLP Cookie Consent Web / CMS