Extension WordPress
Vulnérabilités Real Cookie Banner: GDPR & ePrivacy Cookie Consent
Cette page rassemble les failles publiées pour Real Cookie Banner: GDPR & ePrivacy Cookie Consent, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Real Cookie Banner: GDPR & ePrivacy Cookie Consent
5 fiches
Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.2.4 – Authenticated (Admin+) Server-Side Request Forgery via scan-without-login Endpoint
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.2.4. This is due to insufficient validation on the user-supplied URL in the…
*-5.2.4
5.2.5
23/10/2025
Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.1.5 – Authenticated (Admin+) Stored Cross-Site Scripting
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.1.5 due to insufficient input sanitization and output escaping. This…
*-5.1.5
5.1.6
12/05/2025
Real Cookie Banner <= 3.4.9 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Real Cookie Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-3.4.9
3.4.10
23/12/2022
Real Cookie Banner <= 2.18.1 – Reflected Cross-Site Scripting
The Real Cookie Banner plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in versions up to, and including, 2.18.1. This makes it possible for unauthenticated…
*-2.18.1
2.18.2
14/06/2022
WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent < 2.14.2 – Cross-Site Request Forgery
The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a…
[*, 2.14.2)
2.14.2
07/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.