iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more vulnerabilities
We track 2 vulnerabilities in iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more vulnerabilities
- 7.5 High severity
iubenda | All-in-one Compliance for GDPR /…: Improper Neutralization of Input During Web Page Generation
The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does not properly escape content it re-emits through its bundled HTML parser, allowing unauthenticated users to inject arbitrary web scripts in pages that
- 8.8 High severity
iubenda | All-in-one Compliance for GDPR /…: Cross-Site Request Forgery
The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensure that the options to be updated belong to the plugin as long as they are arrays. As a result, any authenticated users, such as subscriber