Threat database

9 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-42636WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · Cross-site Scripting High7.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42636 Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions. EPSS 0.3%Vulnerability WP Legal Pages #cwe-79	CVE Database V5	2026-10-06
Critical	10.0	EPSS 0.5%	CVE-2026-82970WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · Unrestricted Upload of File with Dangerous Type Critical10.0EPSS 0.5%2026-08-31CVE Database V5CVE-2026-82970 CVE-2026-82970 is a critical vulnerability in the WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin by WP Legal Pages. It involves an unrestricted file upload flaw that allows attackers to upload files with dangerous types. This vulnerability affects versions up to 4.4.1. The flaw can lead to complete compromise of confidentiality, integrity, and availability of the affected system. EPSS 0.5%Vulnerability WP Legal Pages #cwe-434	CVE Database V5	2026-08-31
High	7.3	EPSS 0.4%	CVE-2026-78259WPLegalPages · Authentication Bypass Using an Alternate Path or Channel High7.3EPSS 0.4%2026-08-24CVE Database V5CVE-2026-78259 CVE-2026-78259 is a high-severity authentication bypass vulnerability affecting WP Legal Pages (WPLegalPages) versions up to and including 3.7.0. The flaw involves unauthenticated broken authentication, categorized under CWE-288, which allows attackers to bypass authentication mechanisms using an alternate path or channel. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild at this time. EPSS 0.4%Vulnerability WP Legal Pages #cwe-288	CVE Database V5	2026-08-24
Medium	6.5	EPSS 0.2%	CVE-2026-73359WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · Cross-site Scripting Medium6.5EPSS 0.2%2026-08-18CVE Database V5CVE-2026-73359 Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions. EPSS 0.2%Vulnerability WP Legal Pages #cwe-79	CVE Database V5	2026-08-18
High	7.5	EPSS 0.3%	CVE-2025-67974WPLegalPages · Missing Authorization High7.5EPSS 0.3%2026-02-20CVE Database V5CVE-2025-67974 Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through <= 3.5.4. EPSS 0.3%Vulnerability WP Legal Pages	CVE Database V5	2026-02-20
Medium	5.3	EPSS 0.3%	CVE-2025-66080WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · Missing Authorization Medium5.3EPSS 0.3%2025-12-30CVE Database V5CVE-2025-66080 Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through <= 4.0.3. EPSS 0.3%Vulnerability WP Legal Pages	CVE Database V5	2025-12-30
Medium	5.3	EPSS 0.3%	CVE-2025-66133WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · Missing Authorization Medium5.3EPSS 0.3%2025-12-16CVE Database V5CVE-2025-66133 Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through <= 4.0.7. EPSS 0.3%Vulnerability WP Legal Pages	CVE Database V5	2025-12-16
Medium	4.3	EPSS 0.3%	CVE-2025-66075WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · Missing Authorization Medium4.3EPSS 0.3%2025-11-21CVE Database V5CVE-2025-66075 Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through <= 4.0.3. EPSS 0.3%Vulnerability WP Legal Pages #cwe-862	CVE Database V5	2025-11-21
Medium	4.3	EPSS 0.2%	CVE-2025-49285WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-06-06CVE Database V5CVE-2025-49285 Cross-Site Request Forgery (CSRF) vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Cross Site Request Forgery.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through <= 3.8.0. EPSS 0.2%Vulnerability WP Legal Pages	CVE Database V5	2025-06-06

Showing 1–9 of 9 results