High · 7.1 CVE-2026-42636 EUVD-2026-93058GHSA-qx24-3mr5-jjvr

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Description

Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.

Vendor	Product	Affected	Fixed
WP Legal Pages	WP Cookie Notice for GDPR, CCPA & ePrivacy Consent	≤ 4.4.6	—