Extension WordPress

Vulnérabilités Beautiful Cookie Consent Banner

Cette page rassemble les failles publiées pour Beautiful Cookie Consent Banner, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
7,3CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Beautiful Cookie Consent Banner

4 fiches

CVE-2025-49866 Moyenne · 6,1
Beautiful Cookie Consent Banner

Beautiful Cookie Consent Banner <= 4.6.1 – Reflected Cross-Site Scripting

The Beautiful Cookie Consent Banner plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 4.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…

Versions affectées

*-4.6.1

Correctif

4.6.2

Publication

01/07/2025

Vulnérabilité Élevée · 7,3
Beautiful Cookie Consent Banner

Beautiful Cookie Consent Banner <= 2.10.0 – Missing Authorization to Settings Update

The Beautiful Cookie Consent Banner plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the nsc_bar_save_submitted_form_fields() function called via and admin_init hook in versions up to, and including, 2.10.0. This makes it…

Versions affectées

*-2.10.0

Correctif

2.10.1

Publication

31/01/2023

CVE-2023-3388 Élevée · 7,2
Beautiful Cookie Consent Banner

Beautiful Cookie Consent Banner <= 2.10.1 – Unauthenticated Stored Cross-Site Scripting

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…

Versions affectées

*-2.10.1

Correctif

2.10.2

Publication

31/01/2023

CVE-2022-3823 Moyenne · 5,5
Beautiful Cookie Consent Banner

Beautiful Cookie Consent Banner <= 2.9.0 – Authenticated (Admin+) Stored Cross-Site Scripting

The Beautiful Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 2.9.0 due to insufficient input sanitization and output escaping. This makes it possible for administrator-level…

Versions affectées

*-2.9.0

Correctif

2.9.1

Publication

03/11/2022

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités