CVE-2025-49285

Cross-Site Request Forgery (CSRF) vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Cross Site Request Forgery.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through <= 3.8.0.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - audit@patchstack.com

Published

2025-06-06

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Ccpa Eprivacy Consent (Wp Legal Pages)
• Wp Cookie Notice For Gdpr (Wp Legal Pages)

References

• https://patchstack.com/database/Wordpress/Plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-…