cleantalk
Vulnerabilities and Security Researches

Complianz – GDPR/CCPA Cookie Consent, CVE-2025-11185

CVE, Research URL

CVE-2025-11185

Home page URL

Security reports for Complianz – GDPR/CCPA Cookie Consent

Application

Complianz – GDPR/CCPA Cookie Consent

Published on
Feb 18, 2026
Research Description
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions
max 7.4.4.
Status
vulnerable
Previous vulnerability researches
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2024-12738) , Jan 09, 2025
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2024-6366) , Jul 30, 2024
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2025-4671) , Jun 15, 2025
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2025-13054) , Dec 04, 2025
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2025-15030) , Feb 27, 2026
New vulnerability
BA Book Everything (CVE-2026-24371) , Feb 27, 2026
WP Job Portal – A Complete Job Board (CVE-2026-24941) , Feb 27, 2026
WP Job Portal – A Complete Job Board (CVE-2026-24379) , Feb 27, 2026
WDV One Page Docs – Documentation Plugin for WordPress (CVE-2025-68896) , Feb 27, 2026
Recooty – Modern Applicant Tracking System for Growing Companies (CVE-2025-14616) , Feb 27, 2026