Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics, CVE-2025-1666

CVE, Research URL: CVE-2025-1666
Home page URL: Security reports for Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics
Application: Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics
Published on: Mar 06, 2025
Research Description: The Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the send_uninstall_survey() function in all versions up to, and including, 4.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit the uninstall survey on behalf of a website.
Affected versions: Min -, max 4.4.2.
Status: vulnerable