Civic Cookie Control

Civic Cookie Control has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Civic Cookie Control has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nabil Irawan. Civic Cookie Control is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Civic Cookie Control vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-22348

Civic Cookie Control <= 1.53 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2025-12-30 00:00	Civic Cookie Control <= 1.53 - Missing Authorization Civic Cookie Control <= 1.53	`CVE-2026-22348`	5.3 Medium	Nabil Irawan	Yes

Showing 1–1 of 1 reports

Latestv1.55

Civic Cookie Control

Author

Tasos Fel

3.9(7)

78/100

Last Updated

2026-02-16 (7mo ago)

Active Installs

2,000+

Downloads

90,998

Requires WP

5.3+

Requires PHP

7.4+

Tested up to

WP 6.9.7

Created

2019-02-08 (8y ago)

This WordPress plugin simplifies the implementation and customization process of Cookie Control by Civic UK. With an elegant user-interface that doesn’t hurt the look and feel of your site, Cookie Control is a mechanism for controlling user consent for the use of cookies on their computer. There are several license types available, including: Community edition – Provides all of the core functionality of Cookie Control, and is of course GDPR compliant. You can use it to test Cookie Control, or if you don’t require any of its pro features. Pro edition – Includes all of the pro features for use on a single website, priority support and updates during your subscription. Multisite Pro Edition – Offers all of the pro features for use on up to ten websites, priority support and updates during your subscription. Pro edition and Multisite Pro Edition support IAB (TCF v2.2). To find out more about Cookie Control please visit Civic’s Cookie Control home page. Please Note: You will need to obtain an API KEY from Civic UK in order to use this plugin. Cookie Control is simply a mechanism to enable you to comply with UK and EU law on cookies. You need to determine which elements of your website are using cookies (this can be done via a Cookie Audit, and ensure they are connected to Cookie Control. Important Note: Plugin Updated to support both version 8 and version 9 api keys. Read more

View on WordPress.org