Ninjateam Gdpr Ccpa Compliance \& Cookie Consent Banner vulnerabilities

3 vulnerabilities

Known vulnerabilities in Ninjateam Gdpr Ccpa Compliance \& Cookie Consent Banner, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-24591ninja teamgdpr ccpa compliance support+2
EPSS score
0.50%
Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.1.9.8CVE-2020-36718ninjateamgdpr_ccpa_compliance_\&_cookie_consent_banner+2
EPSS score
1.72%
The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deserialization of untrusted input "njt_gdpr_allow_permissions" value. This allows unauthenticated attackers to inject a PHP Object.5.4CVE-2024-5607ninjateamgdpr_ccpa_compliance_\&_cookie_consent_banner+1
EPSS score
0.28%
The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings() in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings, update page content, send arbitrary emails and inject malicious web scripts.