Vulnerabilities in complianz
8 resultsVexday analysis
Complianç possui 5 vulnerabilidades registradas, nenhuma delas atualmente sob ataque ativo conforme KEV do CISA. A fraqueza dominante é cross-site scripting (CWE-79), típica de aplicações web, com 1 CVE publicado nos últimos 90 dias e nenhuma classificação crítica. O risco permanece contido, mas demanda atenção à remediação de XSS em futuras atualizações.
CVE-2026-65497HIGHWordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2023-6498MEDIUMComplianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settingsEPSS 0.3%CVE-2026-4019MEDIUMComplianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST EndpointEPSS 0.3%CVE-2025-11185MEDIUMComplianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2026-65498MEDIUMWordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-2389MEDIUMComplianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content FilterEPSS 0.2%CVE-2024-1592MEDIUMComplianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request DeletionEPSS 0.2%CVE-2026-65496MEDIUMWordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%