Wplegalpages vulnerabilities
We track 5 vulnerabilities in Wplegalpages products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2026.
Latest Wplegalpages vulnerabilities
- 7.2 High severity
WPLP Cookie Consent – Cookie Banner & Consent…: Improper Neutralization of Input During Web Page Generation
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpl_user_preference' parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output esca
- 9.8 Critical severity
WPLP Cookie Consent – Cookie Banner & Consent…: Unrestricted Upload of File with Dangerous Type
The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saas_upload_logo() function combined with an authorization
- 7.2 High severity
WPLP Cookie Consent – Cookie Banner & Consent…: Improper Neutralization of Input During Web Page Generation
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regionArray' parameter in all versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Th
- 7.5 High severity
Cookie Banner for GDPR / CCPA – WPLP Cookie…: Missing Authorization
The GDPR Cookie Consent plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gdpr/v1/settings' REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated atta
- 8.1 High severity
Privacy Policy Generator – WPLP Legal Pages: Missing Authorization
The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the wplp_gdpr_install_plugin_ajax_handler() function in