Show filters
88 Total Results
Displaying 31-40 of 88
Sort by:
Attacker Value
Unknown
CVE-2023-23678
Disclosure Date: November 07, 2023 (last updated November 16, 2023)
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie Consent ( for GDPR, CCPA & ePrivacy ).This issue affects WP Cookie Consent ( for GDPR, CCPA & ePrivacy ): from n/a through 2.2.5.
0
Attacker Value
Unknown
CVE-2023-45608
Disclosure Date: October 18, 2023 (last updated October 25, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Nicola Modugno Smart Cookie Kit plugin <= 2.3.1 versions.
0
Attacker Value
Unknown
CVE-2023-40198
Disclosure Date: October 03, 2023 (last updated October 09, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Antsanchez Easy Cookie Law plugin <= 3.1 versions.
0
Attacker Value
Unknown
CVE-2023-40604
Disclosure Date: September 27, 2023 (last updated October 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jes Madsen Cookies by JM plugin <= 1.0 versions.
0
Attacker Value
Unknown
CVE-2023-39640
Disclosure Date: September 25, 2023 (last updated October 08, 2023)
UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList().
0
Attacker Value
Unknown
CVE-2023-41948
Disclosure Date: September 25, 2023 (last updated October 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christoph Rado Cookie Notice & Consent plugin <= 1.6.0 versions.
0
Attacker Value
Unknown
CVE-2023-32294
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin <= 1.1.6 versions.
0
Attacker Value
Unknown
CVE-2023-4013
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks
0
Attacker Value
Unknown
CVE-2023-33208
Disclosure Date: August 30, 2023 (last updated October 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gsmith Cookie Monster plugin <= 1.51 versions.
0
Attacker Value
Unknown
CVE-2023-26136
Disclosure Date: July 01, 2023 (last updated October 08, 2023)
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
0
