Iubenda Iubenda-Cookie-Law-Solution
2 CVEs affecting Iubenda Iubenda-Cookie-Law-Solution. Latest disclosed: 2023-01-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3911 | High | 8.8 | 2023-01-02 | The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensure that the options to be updated belon… |
CVE-2020-12742 | Medium | 6.1 | 2020-05-13 | The iubenda-cookie-law-solution plugin before 2.3.5 for WordPress does not restrict URL sanitization to http protocols. |