Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-23678 EUVD-2023-27765GHSA-9p49-m9cm-86gp

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie Consent ( for GDPR, CCPA & ePrivacy ).This issue affects WP Cookie Consent ( for GDPR, CCPA & ePrivacy ): from n/a through 2.2.5.

Affected products

VendorProductAffectedFixed
WPEkaClub WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) ≤ 2.2.5 —

References