Known vulnerabilities in Complianz GDPR/CCPA Cookie Consent Banner

Publish your cookie banner or notice in minutes. Automatically scan cookies, and create policies to align with GDPR, CCPA, and Google Consent Mode.

9Reported vulnerabilities

6.6Highest CVSS score

7.5.3.1Latest version

1,000,000+Active installs

What to do now

Update Complianz GDPR/CCPA Cookie Consent Banner to 7.5.2 or later. 9 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-65497	Medium 6.6	0.5%	7.5.1 and earlier	`7.5.2`	July 22, 2026
CVE-2026-65496	Medium 6.4	0.2%	7.5.1 and earlier	`7.5.2`	July 22, 2026
CVE-2025-11185	Medium 6.4	0.2%	0 to 7.4.3 (inclusive)	`7.4.4`	February 18, 2026
CVE-2026-65498	Medium 5.3	0.3%	7.5.1 and earlier	`7.5.2`	July 22, 2026
CVE-2026-4019	Medium 5.3	0.3%	0 to 7.4.5 (inclusive)	`7.4.6`	April 29, 2026
CVE-2026-2389	Medium 4.9	0.2%	0 to 7.4.4.2 (inclusive)	`7.4.5`	March 26, 2026
CVE-2023-33333	Medium 4.3	0.3%	6.4.4 and earlier	`6.4.5`	May 12, 2023
WF-e7b81559-93a2-4e50-b213-0e22eea8a219	Medium 4.3	—	6.4.4 and earlier	`6.4.5`	May 12, 2023
WF-f55af49e-82c8-462b-8c0b-a25e966a27af	Medium 4.3	—	6.4.4 and earlier	`6.4.5`	May 12, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.