UniConsent Cookie Consent CMP – Consent Manager

UniConsent Cookie Consent CMP – Consent Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for UniConsent Cookie Consent CMP – Consent Manager has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rio Darmawan. UniConsent Cookie Consent CMP – Consent Manager is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all UniConsent Cookie Consent CMP – Consent Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-41800

UniConsent Cookie Consent CMP for GDPR / CCPA <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2023-09-05 00:00	UniConsent Cookie Consent CMP for GDPR / CCPA <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting UniConsent Cookie Consent CMP <= 1.4.3	`CVE-2023-41800`	4.4 Medium	Rio Darmawan	Yes

Showing 1–1 of 1 reports

Latestv1.7.1

UniConsent Cookie Consent CMP – Consent Manager

Author

Transfon

3.7(3)

74/100

Last Updated

2026-07-21 (2mo ago)

Active Installs

2,000+

Downloads

40,064

Requires WP

4.0+

Requires PHP

7.4+

Tested up to

WP 6.8.8

Created

2018-07-01 (8y ago)

UniConsent is a leading Consent Management Platform (CMP) that helps websites comply with global privacy regulations including GDPR, CCPA/CPRA, COPPA, LGPD, PIPL, POPIA, and PDPA. Certifications Certified EU IAB TCF 2.3 CMP Certified Canada IAB TCF CMP Certified Google Consent Mode CMP (Gold Tier) Features 11 banner styles with visual preview — Bottom Sheet, Floating Card, Dark Compact, Popup, and more Google Consent Mode v2 Microsoft UET and Bing Ads Consent Mode IAB GPP 1.1 consent signals EU IAB TCF 2.3, TCF Canada, CCPA USP, and US state consent signals Privacy badge toggle GEO targeting — show consent banners only to visitors in specific regions 52+ languages support WP Consent API compatible Works with Google Ad Manager, Google AdX, Google AdSense, Prebid.js, Amazon APS, Facebook Pixel, LinkedIn Pixel, and more How It Works Install and activate the plugin, choose your banner style, enable GDPR and/or CCPA compliance, and save. The consent banner appears on your site automatically — no coding required. For advanced features such as custom CSS, consent analytics, cookie scanning, and consent logging, register for a free license key at uniconsent.com. Keep updated on Data Privacy Regtech News.

View on WordPress.org