CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25143

The GDPR Cookie Compliance plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the gdpr_cookie_compliance_reset_settings AJAX action in versions up to, and including, 4.0.2. This makes it possible for authenticated attackers to reset all of the settings.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 7.1%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2019-25143

Mooveagency » Gdpr Cookie Compliance » Version: 1.0.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.0
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.1
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.2
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.3

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.3
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.4

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.4
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.5

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.5
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.6

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.6
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.7

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.7
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.8

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.8
Mooveagency » Gdpr Cookie Compliance » Version: 1.0.9

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.0.9
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.0
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.1
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.2
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.3

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.3
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.4

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.4
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.5

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.5
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.6

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.6
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.7

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.7
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.8

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.8
Mooveagency » Gdpr Cookie Compliance » Version: 1.1.9

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.1.9
Mooveagency » Gdpr Cookie Compliance » Version: 1.2.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.2.0
Mooveagency » Gdpr Cookie Compliance » Version: 1.2.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.2.1
Mooveagency » Gdpr Cookie Compliance » Version: 1.2.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.2.2
Mooveagency » Gdpr Cookie Compliance » Version: 1.2.3

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.2.3
Mooveagency » Gdpr Cookie Compliance » Version: 1.2.4

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.2.4
Mooveagency » Gdpr Cookie Compliance » Version: 1.2.5

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.2.5
Mooveagency » Gdpr Cookie Compliance » Version: 1.2.6

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.2.6
Mooveagency » Gdpr Cookie Compliance » Version: 1.3.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.3.0
Mooveagency » Gdpr Cookie Compliance » Version: 1.3.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.3.1
Mooveagency » Gdpr Cookie Compliance » Version: 1.3.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.3.2
Mooveagency » Gdpr Cookie Compliance » Version: 1.3.3

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.3.3
Mooveagency » Gdpr Cookie Compliance » Version: 1.3.4

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.3.4
Mooveagency » Gdpr Cookie Compliance » Version: 1.4.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.4.0
Mooveagency » Gdpr Cookie Compliance » Version: 1.4.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:1.4.1
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.0
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.1
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.2
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.3

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.3
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.4

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.4
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.5

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.5
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.6

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.6
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.7

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.7
Mooveagency » Gdpr Cookie Compliance » Version: 2.0.8

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.0.8
Mooveagency » Gdpr Cookie Compliance » Version: 2.1.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.1.0
Mooveagency » Gdpr Cookie Compliance » Version: 2.1.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.1.1
Mooveagency » Gdpr Cookie Compliance » Version: 2.1.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.1.2
Mooveagency » Gdpr Cookie Compliance » Version: 2.1.3

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.1.3
Mooveagency » Gdpr Cookie Compliance » Version: 2.1.4

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.1.4
Mooveagency » Gdpr Cookie Compliance » Version: 2.1.5

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.1.5
Mooveagency » Gdpr Cookie Compliance » Version: 2.1.6

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:2.1.6
Mooveagency » Gdpr Cookie Compliance » Version: 3.0.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.0.0
Mooveagency » Gdpr Cookie Compliance » Version: 3.0.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.0.1
Mooveagency » Gdpr Cookie Compliance » Version: 3.0.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.0.2
Mooveagency » Gdpr Cookie Compliance » Version: 3.0.3

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.0.3
Mooveagency » Gdpr Cookie Compliance » Version: 3.0.4

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.0.4
Mooveagency » Gdpr Cookie Compliance » Version: 3.1.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.1.0
Mooveagency » Gdpr Cookie Compliance » Version: 3.1.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.1.1
Mooveagency » Gdpr Cookie Compliance » Version: 3.2.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.2.0
Mooveagency » Gdpr Cookie Compliance » Version: 3.2.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:3.2.1
Mooveagency » Gdpr Cookie Compliance » Version: 4.0.0

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:4.0.0
Mooveagency » Gdpr Cookie Compliance » Version: 4.0.1

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:4.0.1
Mooveagency » Gdpr Cookie Compliance » Version: 4.0.2

cpe:2.3:a:mooveagency:gdpr_cookie_compliance:4.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25143

Products

Pricing

Contact Us