Test ID:	1.3.6.1.4.1.25623.1.0.127648
Category:	Web application abuses
Title:	WordPress Complianz - GDPR/CCPA Cookie Consent Premium Plugin < 6.4.7 CSRF Vulnerability
Summary:	The WordPress plugin 'Complianz - GDPR/CCPA Cookie Consent; Premium' is prone to a cross-site request forgery (CSRF) vulnerability.
Description:	Summary: The WordPress plugin 'Complianz - GDPR/CCPA Cookie Consent Premium' is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Impact: Attackers are able to invoke this function and add web scripts to a site via a forged request granted due to missing nonce validation on the ajax_script_add() and ajax_script_save() functions called via AJAX actions. Affected Software/OS: WordPress Complianz - GDPR/CCPA Cookie Consent Premium plugin prior to version 6.4.7. Solution: Update to version 6.4.7 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-33333 https://patchstack.com/database/vulnerability/complianz-gdpr-premium/wordpress-complianz-premium-plugin-6-4-6-1-csrf-to-site-wide-cross-site-scripting-xss-vulnerability?_s_id=cve https://patchstack.com/database/vulnerability/complianz-gdpr/wordpress-complianz-plugin-6-4-4-csrf-lead-to-site-wide-cross-site-scripting-xss-vulnerability?_s_id=cve
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.