Cookies and Content Security Policy

Cookies and Content Security Policy has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 2 of the records (100%).

Every one of the 2 issues recorded for Cookies and Content Security Policy has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Cookies and Content Security Policy is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Cookies and Content Security Policy vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-63019

Cookies and Content Security Policy <= 2.34 - Unauthenticated Information Exposure

Read the full analysis

Vulnerability Records

2 records
Cookies and Content Security Policy banner
Latestv2.41

Cookies and Content Security Policy

Johan Jonk Stenström

Author

Johan Jonk Stenström

4.9(67)
98/100
Last Updated
2026-08-25 (19d ago)
Active Installs
10,000+
Downloads
518,653
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2020-03-07 (7y ago)

Be fully GDPR and CCPA compliant through Content Security Policy. Block cookies and unwanted external content by setting Content Security Policy. A modal will be shown on the front end to let the visitor choose what kind of resources to accept. It also adds a layer of security for your site since iframes, scripts and images from unknown domains are blocked. Multilingual support through WPML, Polylang or probably any multilingual plugin out there since this plugin follows WordPress Coding Standards. See FAQ below on how to translate with WPML or Polylang. Quickstart: Choose common resources from a list that are automatically added to your Domains list. So, it’s even easier to set it up! Check, check, check and check! Updated regularly. Free stickers for translators! Since we want this plugin to be available in as many languages as possible, I will send you a handful of the new super cool stickers if you translate the plugin! Just translate the plugin to your language, and when it is approved, comment this post and I’ll send it to you, totally free! If you have already translated the plugin and want stickers, of course that counts too! Just comment the post.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C