Known vulnerabilities in Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others)

Install a Cookie Notice or Consent Banner as Required by Privacy Laws (GDPR & CCPA).

2Reported vulnerabilities

6.4Highest CVSS score

1.8.0Latest version

6,000+Active installs

What to do now

Update Free Cookie Notice & Consent Banner for Privacy Compliance (GDPR, CCPA, DSGVO and others) to 1.7.12 or later. 2 of these have a fixed version available. Updating resolves them.

Plugin last updated: March 22, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2021-24590	Medium 5.4	0.6%	Before 1.7.2	`1.7.2`	September 6, 2021
CVE-2025-58607	Medium 6.4	0.2%	1.7.11 and earlier	`1.7.12`	September 3, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.