CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6700

The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level access or higher, to edit arbitrary site options which can be used to create administrator accounts.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.243

EPSS Ranking 95.8%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-6700

Cookieinformation » Wp-Gdpr-Compliance » Version: N/A

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:-
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.1

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.1
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.10

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.10
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.11

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.11
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.12

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.12
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.13

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.13
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.14

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.14
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.15

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.15
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.16

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.16
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.17

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.17
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.18

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.18
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.19

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.19
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.2

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.2
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.20

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.20
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.21

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.21
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.22

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.22
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.3

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.3
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.4

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.4
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.5

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.5
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.6

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.6
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.7

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.7
Cookieinformation » Wp-Gdpr-Compliance » Version: 2.0.9

cpe:2.3:a:cookieinformation:wp-gdpr-compliance:2.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6700

Products

Pricing

Contact Us