GDPR Cookie Notice
GDPR Cookie Notice has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for GDPR Cookie Notice has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Kévin Mosbahi (Mika). GDPR Cookie Notice is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.7.17.
CVE-2025-31765GDPR Cookie Notice <= 1.2.0 - Missing Authorization
Read the full analysisVulnerability Records
GDPR Cookie Notice
Author
themeqx
The GDPR Cookie Notice plugin will assist you in making your website GDPR compliant. Show cookie notice to your site easily. More customization features coming. Contact US https://www.themeqx.com/contact-us/ Key Features GDPR Cookie Notice will enable a notice with Accept options. The cookies are not rendered by default and only upon user consent. By default, if any users accept the cookie, it will set a cookie for 30 days to users browser. Admin can configure cookie details and their description from the backend. This cookie notice plugin able to show a Privacy policy Page to notice, so anyone can click and read your websites privacy policy. Admin can set Predefined Privacy Policy page from the Settings > GDPR Cookie Notice page Extremely Light Weight
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C