UniConsent Cookie Consent CMP – Consent Manager

UniConsent Cookie Consent CMP – Consent Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of October 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for UniConsent Cookie Consent CMP – Consent Manager has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rio Darmawan. UniConsent Cookie Consent CMP – Consent Manager is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.0.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all UniConsent Cookie Consent CMP – Consent Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-41800

UniConsent Cookie Consent CMP for GDPR / CCPA <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
UniConsent Cookie Consent CMP – Consent Manager banner
Latestv1.8.0

UniConsent Cookie Consent CMP – Consent Manager

Transfon

Author

Transfon

3.7(3)
74/100
Last Updated
2026-09-24 (1mo ago)
Active Installs
2,000+
Downloads
42,476
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.1.0
Created
2018-07-01 (8y ago)

UniConsent is a leading Consent Management Platform (CMP) that helps websites comply with global privacy regulations including GDPR, CCPA/CPRA, COPPA, LGPD, PIPL, POPIA, and PDPA. Add a GDPR and CCPA cookie consent banner to your site in minutes, with no coding. The plugin is free for up to 50,000 users per month and works without an account. Choose your banner type Cookie categories: a cookie banner where visitors accept or reject each cookie category. Choices are passed to Google Consent Mode v2 and Microsoft UET Consent Mode, so it suits most sites, including sites that use Google Analytics or run Google Ads or Microsoft Ads (Bing Ads) campaigns with conversion and remarketing pixels. IAB TCF 2.4: for sites that show ads through Google AdSense, Google Ad Manager, Google AdX, or other programmatic ad networks. Google requires a certified IAB TCF CMP to serve ads to visitors in the EEA, UK, and Switzerland. Certifications Certified EU IAB TCF 2.4 CMP Certified Canada IAB TCF CMP Certified Google Consent Mode CMP (Gold Tier) Features Cookie categories or IAB TCF 2.4 cookie consent banner 11 banner styles with visual preview: Bottom Sheet, Floating Card, Dark Compact, Popup, and more Google Consent Mode v2 Microsoft UET and Bing Ads Consent Mode IAB GPP 1.1 consent signals EU IAB TCF 2.4, TCF Canada, CCPA USP, and US state consent signals Works with Google Ad Manager, Google AdX, Google AdSense, Prebid.js, and Amazon APS through IAB TCF 2.4 GEO targeting: show the consent banner to all visitors or only to visitors in the EU/EEA 52+ languages, with automatic detection of the visitor’s browser language Privacy settings button so visitors can change their consent at any time Uses your site title and WordPress privacy policy page automatically Loads with a single tag at the top of the page WP Consent API compatible Up to 50,000 users per month More with a UniConsent account Create a UniConsent account, configure your banner in the dashboard, and paste your license key into the plugin to unlock advanced features such as custom CSS, consent analytics, cookie scanning, and consent logging: More than 50,000 users per month Custom banner text, translations, and custom CSS styling Custom purposes, IAB vendors, Google vendors, and custom vendors Website cookie discovery and disclosure JavaScript and cookie blocking for tags such as Facebook Pixel and LinkedIn Pixel Consent rate analytics dashboard and ConsentDB consent logging Header bidding support for Prebid.js and Amazon APS First-party CMP domain How It Works Install and activate the plugin. Choose a banner type, banner style, and language. Save. The cookie consent banner appears on your site automatically. Keep updated on Data Privacy Regtech News.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C