Compliance by Hu-manity.co

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Compliance by Hu-manity.co

Information

Software Type Plugin
Software Slug cookie-notice (view on wordpress.org)
Software Status Active
Software Author humanityco
Software Website cookie-compliance.co
Software Downloads 39,769,633
Software Active Installs 900,000
Software Record Last Updated July 11, 2026

6 Vulnerabilities

Submit a Vulnerability
Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2025-11186
Nov 21, 2025
Researcher: Muhammad Yudha - DJ
Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2025-67554
Oct 21, 2025
Researcher: Peter Thaleikis
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2022-3399
Aug 15, 2024
Researcher: c3p0d4y
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_revoke_shortcode' Shortcode
6.4
CVE-2023-0823
Mar 6, 2023
Researcher: Erwan LR
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes
6.4
CVE-2023-24400
Mar 2, 2023
Researcher: Rafie Muhammad
Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.8
CVE-2021-24569
Aug 30, 2021
Researcher: Asif Nawaz Minhas
Title Status CVE ID CVSS Researchers Date
Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Patched CVE-2025-11186 6.4 Muhammad Yudha - DJ November 21, 2025
Cookie Notice & Compliance for GDPR / CCPA <= 2.5.8 - Authenticated (Author+) Stored Cross-Site Scripting Patched CVE-2025-67554 6.4 Peter Thaleikis October 21, 2025
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2022-3399 4.4 c3p0d4y August 15, 2024
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_revoke_shortcode' Shortcode Patched CVE-2023-0823 6.4 Erwan LR March 6, 2023
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes Patched CVE-2023-24400 6.4 Rafie Muhammad March 2, 2023
Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2021-24569 4.8 Asif Nawaz Minhas August 30, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation