CVE-2022-0445: Devowl WordPress Real Cookie Banner

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack

Affected products

• Devowl WordPress Real Cookie Banner: before 2.14.2 (fixed in 2.14.2)

Published 2022-03-07. Last modified 2026-06-17.