PT-2026-4000 · Johan Jonk Stenström · Cookies/Content Security Policy

Published 2026-01-22 · Updated 2026-01-22 · CVE-2025-63019

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cookies and Content Security Policy versions prior to 2.35

Description An issue in cookies-and-content-security-policy allows the insertion of sensitive information into sent data, which can lead to the retrieval of embedded sensitive data.

Recommendations Update to a version newer than 2.34.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-63019

Affected Products

Cookies/Content Security Policy

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-63019 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/cookies-and-content-security-policy/vulnerability/wordpress-cookies-and-content-security-policy-plugin-2-34-sensitive-data-exposure-vulnerability?_s_id=cve · Note