Test ID:	1.3.6.1.4.1.25623.1.0.170213
Category:	Web application abuses
Title:	WordPress Complianz - GDPR/CCPA Cookie Consent Premium Plugin < 6.3.6 SQLi Vulnerability
Summary:	The WordPress plugin 'Complianz - GDPR/CCPA Cookie Consent; Premium' is prone to an SQL injection (SQLi) vulnerability.
Description:	Summary: The WordPress plugin 'Complianz - GDPR/CCPA Cookie Consent Premium' is prone to an SQL injection (SQLi) vulnerability. Vulnerability Insight: The plugins allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML. Affected Software/OS: WordPress Complianz - GDPR/CCPA Cookie Consent Premium prior to version 6.3.6. Solution: Update to version 6.3.6 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-3494 https://wpscan.com/vulnerability/71db75c0-5907-4237-884f-8db88b1a9b34
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.