Caching Compatible Cookie Opt-In and JavaScript
Caching Compatible Cookie Opt-In and JavaScript has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Caching Compatible Cookie Opt-In and JavaScript has a vendor fix available, so running the current release closes it.
All of these findings were reported by SOPROBRO. Caching Compatible Cookie Opt-In and JavaScript is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-24547Caching Compatible Cookie Opt-In and JavaScript <= 0.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Caching Compatible Cookie Opt-In and JavaScript
Author
matthias.wagner
This lightweight plugin closes the gap between the annoying need for a cookie-banner to opt-in to some scripts (third party tracking, …) and super fast websites enabled by server-side caching plugins like WP Fastest Cache, W3 Total Cache and so on. It is very simple: * A visitor makes his selection by clicking the buttons in the cookie banner (use all cookies or use only necessary cookies) * The selection is stored in a cookie * Now after every page load our JS checks the cookie and asynchronously fetches the allowed scripts depending on the users selection * You can also place shortcodes with inline scripts and html in your content with the same functionality and inline-warnings if no optin was made * You can also place a shortcode to show the visitor his decision and allow him to revoke that decision, which seems necessary if you want to be gdpr compliant with your cookie solution Our documentation including information on action and filter hooks can be found here
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C