Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others)

Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-58607

Cookie Notice & Consent Banner for GDPR & CCPA Compliance <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) banner
Latestv1.8.0

Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others)

GDPR Info

Author

GDPR Info

4.0(16)
80/100
Last Updated
2026-03-22 (6mo ago)
Active Installs
7,000+
Downloads
75,080
Requires WP
5.0+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2020-04-15 (7y ago)

Install a Cookie Notice or Consent Banner as Required by Privacy Laws (GDPR & CCPA). Easily Customizable to Fit Your Design. Features Fit banner to website design by using WordPress customizer Block unnecessary cookies like required by most privacy laws Remember user consent for future visits Many features to come stay tuned! The plugin is useful in preparing your site for data protection and privacy regulations: GDPR: The General Data Protection Regulation (European Union) DSGVO, RGPD, ОРЗД, ONOOÚ, Persondataforordningen, RGPD, AVG, Rodo, ePrivacy Directive, ePrivacy Regulation CCPA: The California Consumer Privacy Act (California, United States) PIPEDA: The Personal Information Protection and Electronic Documents Act (Canada) DPA: Data Protection Act (2018) (United Kingdom) PECR: Privacy and Electronic Communications Regulations (United Kingdom) AAP: Australia’s Privacy Principles (Australia) LGPD: The Brazilian General Data Protection Law (Brazil) PDPA: Personal Data Protection Act (Argentina, Malaysia) APPI: Act on the Protection of Personal Information (Japan) PDPL: Personal Data Protection Law (Bahrain) POPIA: Protection of Personal Information Act (South Africa) Law 25: Act Respecting the Protection of Personal Information (Canada Quebec) FADP: Federal Act on Data Protection (Switzerland) PIPL: Personal Information Protection Law (China) 152-FZ: Federal Law on Personal Data (Russia) DPDPA: Digital Personal Data Protection Act (India) LFPDPPP: Federal Law on Protection of Personal Data (Mexico)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C