Description
Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP Legal Pages | WP Cookie Notice for GDPR, CCPA & ePrivacy Consent | ≤ 4.3.9 | — |
Medium · 6.5
CVE-2026-73359
EUVD-2026-60783GHSA-33vm-4hx3-5pcg
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack