CVE-2022-0445CWE-352

CVE-2022-0445: vulnerability in WordPress Real Cookie Banner: GDPR (DSGVO) &…

WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF

Published · Updated

Follow this CVE+ Monitor Real Cookie Banner: GDPR & ePrivacy Cookie Consent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack
Affected products
Unknown · WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent