PatchTheCVEgdpr cookie consent vulnerabilities and fixes
Recent CVEs affecting gdpr cookie consent, with upgrade or downgrade steps. 2 tracked.
Also searched as: gdprcookieconsent.
gdpr cookie consent has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-05-15. Highest priority: CVE-2024-8286 (score 31/100).
- CVE-2024-8397 MEDIUM 5.4 UPGRADE The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not properly sanitize and escape the IP h
- CVE-2024-8286 MEDIUM 6.5 UPGRADE The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions
FAQ
How do I fix gdpr cookie consent vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gdpr cookie consent being exploited right now?
None of the tracked gdpr cookie consent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gdpr cookie consent CVE should I patch first?
CVE-2024-8286 currently ranks highest (31/100): The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions.