PT-2026-4438 · WordPress · Simple Gdpr Cookie Compliance

Legion Hunter · Published 2026-01-23 · Updated 2026-01-24 · CVE-2026-24604

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions themebeez Simple GDPR Cookie Compliance versions through 2.0.0

Description An issue exists in themebeez Simple GDPR Cookie Compliance where incorrectly configured access control security levels can be exploited, leading to a missing authorization condition.

Recommendations Update themebeez Simple GDPR Cookie Compliance to a version later than 2.0.0.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-24604

Affected Products

Simple Gdpr Cookie Compliance

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24604 · Security Note
• https://twitter.com/VulmonFeeds/status/2014788861797294587 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/simple-gdpr-cookie-compliance/vulnerability/wordpress-simple-gdpr-cookie-compliance-plugin-2-0-0-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2015086255168495927 · Twitter Post