Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others)
Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-58607Cookie Notice & Consent Banner for GDPR & CCPA Compliance <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others)
Author
GDPR Info
Install a Cookie Notice or Consent Banner as Required by Privacy Laws (GDPR & CCPA). Easily Customizable to Fit Your Design. Features Fit banner to website design by using WordPress customizer Block unnecessary cookies like required by most privacy laws Remember user consent for future visits Many features to come stay tuned! The plugin is useful in preparing your site for data protection and privacy regulations: GDPR: The General Data Protection Regulation (European Union) DSGVO, RGPD, ОРЗД, ONOOÚ, Persondataforordningen, RGPD, AVG, Rodo, ePrivacy Directive, ePrivacy Regulation CCPA: The California Consumer Privacy Act (California, United States) PIPEDA: The Personal Information Protection and Electronic Documents Act (Canada) DPA: Data Protection Act (2018) (United Kingdom) PECR: Privacy and Electronic Communications Regulations (United Kingdom) AAP: Australia’s Privacy Principles (Australia) LGPD: The Brazilian General Data Protection Law (Brazil) PDPA: Personal Data Protection Act (Argentina, Malaysia) APPI: Act on the Protection of Personal Information (Japan) PDPL: Personal Data Protection Law (Bahrain) POPIA: Protection of Personal Information Act (South Africa) Law 25: Act Respecting the Protection of Personal Information (Canada Quebec) FADP: Federal Act on Data Protection (Switzerland) PIPL: Personal Information Protection Law (China) 152-FZ: Federal Law on Personal Data (Russia) DPDPA: Digital Personal Data Protection Act (India) LFPDPPP: Federal Law on Protection of Personal Data (Mexico)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C