WordPress plugins
CVE-2026-42636
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability
- Severity
- High 7.1
- Published
- 6 Oct 2026
- Last changed
- 6 Oct 2026
- Added to UpHeron
- 3 Nov 2026
- Sources
- CVE Program
Affected software
| Software | Affected versions |
|---|---|
Gdpr Cookie Consent (WordPress plugin)WordPress plugins · wp-plugin:gdpr-cookie-consent |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-42636