Vulnerabilities (CVE)

Filtered by vendor Accesspressthemes Subscribe
Filtered by product Wp Cookie User Info
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24858 1 Accesspressthemes 1 Wp Cookie User Info 2022-01-27 6.5 MEDIUM 7.2 HIGH
The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection