GDPR Cookie Consent Plugin (WordPress) Update
2630Warning Date
Severity Level
Warning Number
Target Sector
13 February, 2020
● Critical
2020-911
All
Description:
Wordfence has released a security update to address a vulnerability in the following product:
- GDPR Cookie Consent Plugin
Threats:
Attacker could exploit this vulnerability by doing the following:
- Cross-site scripting (XSS)
Best practice and Recommendations:
The CERT team encourages users to review Wordfence security advisory and apply the necessary updates:
- https://www.wordfence.com/blog/2020/02/improper-access-controls-in-gdpr-cookie-consent-plugin/