Cookie Notice & Compliance for GDPR / CCPA, PSC-2026-64624
- PSC, Research URL
- Application
- Published on
- Feb 27, 2026
- Research Description
- Cookie notice plugins look “simple”, but they are security-relevant because they influence front-end script execution, store site-wide consent settings, and often expose customization fields that end up rendered for every visitor. If access control, request integrity, or output handling is weak, attackers can aim for stored/reflected XSS in banner content, CSRF-driven settings changes (silently altering consent behavior), or information exposure through misprotected endpoints and diagnostics. Cookie Notice & Compliance for GDPR / CCPA version 2.5.13 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64624, confirming that the plugin was reviewed from a secure code perspective with attention to the most common exploitation paths for cookie notice and consent-management plugins.
- Affected versions
-
Min 2.5.13, max 2.5.13.
- Status
-
SAFE & CERTIFIED