CVE-2025-31765

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-31765
Missing Authorization vulnerability in themeqx GDPR Cookie Notice gdpr-cookie-notice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR Cookie Notice: from n/a through <= 1.2.0.
CVSS

No CVSS.

References
Link Resource
https://patchstack.com/database/Wordpress/Plugin/gdpr-cookie-notice/vulnerability/wordpress-gdpr-cookie-notice-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve
Configurations

No configuration.

History

01 Apr 2026, 17:21

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.3 		v2 : unknown
v3 : unknown
Summary
  • (es) La vulnerabilidad de falta de autorización en themeqx GDPR Cookie Notice permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al Aviso de Cookies del RGPD desde n/d hasta la versión 1.2.0.
Summary (en) Missing Authorization vulnerability in themeqx GDPR Cookie Notice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GDPR Cookie Notice: from n/a through 1.2.0. (en) Missing Authorization vulnerability in themeqx GDPR Cookie Notice gdpr-cookie-notice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR Cookie Notice: from n/a through <= 1.2.0.
References
  • {'url': 'https://patchstack.com/database/wordpress/plugin/gdpr-cookie-notice/vulnerability/wordpress-gdpr-cookie-notice-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve', 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/gdpr-cookie-notice/vulnerability/wordpress-gdpr-cookie-notice-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve -

01 Apr 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-01 15:16

Updated : 2026-04-01 17:21

NVD link : CVE-2025-31765

Mitre link : CVE-2025-31765

CVE.ORG link : CVE-2025-31765

JSON object : View

Products Affected

No product.

CWE
CWE-862

Missing Authorization