Vulnerabilities in WP Legal Pages
8 resultsVexday analysis
WP Legal Pages apresenta um perfil de risco contido com apenas 5 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa (KEV). A fraqueza predominante é CWE-862 (falta de autorização), indicando problemas de controle de acesso. Não há vulnerabilidades críticas confirmadas nem publicações recentes, sugerindo que o risco está estabilizado.
CVE-2026-82970CRITICALWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerabilityEPSS 0.3%CVE-2025-66075MEDIUMWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-67974HIGHWordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-66080MEDIUMWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-66133MEDIUMWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-78259HIGHWordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2026-73359MEDIUMWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49285MEDIUMWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.8.0 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%