Iubenda-cookie-law-solution vulnerabilities
1 known vulnerability in Iubenda-cookie-law-solution from Iubenda. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
iubenda | All-in-one Compliance for GDPR /…: Cross-Site Request Forgery
The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensure that the options to be updated belong to the plugin as long as they are arrays. As a result, any authenticated users, such as subscriber