CVE-2025-11185

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-11185", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-30T08:41:34.360Z", "datePublished": "2026-02-18T09:25:52.199Z", "dateUpdated": "2026-04-08T17:32:13.380Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:32:13.380Z"}, "affected": [{"vendor": "complianz", "product": "Complianz \u2013 GDPR/CCPA Cookie Consent", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "7.4.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Complianz \u2013 GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "title": "Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f0533fca-a4de-44f0-bea0-1df6a41709ca?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.4.2/documents/class-document.php#L21"}, {"url": "https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.4.2/documents/class-document.php#L1174"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Yudha - DJ"}], "timeline": [{"time": "2025-09-29T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2026-02-17T16:55:54.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-02-17T21:15:49.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-18T12:24:49.624286Z", "id": "CVE-2025-11185", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-18T12:50:51.671Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11185", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-18T12:24:49.624286Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-18T12:24:50.726Z"}}], "cna": {"title": "Complianz | GDPR/CCPA Cookie Consent <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode", "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Yudha - DJ"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "complianz", "product": "Complianz \u2013 GDPR/CCPA Cookie Consent", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "7.4.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-09-29T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2026-02-17T16:55:54.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-02-17T21:15:49.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f0533fca-a4de-44f0-bea0-1df6a41709ca?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.4.2/documents/class-document.php#L21"}, {"url": "https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.4.2/documents/class-document.php#L1174"}], "descriptions": [{"lang": "en", "value": "The Complianz \u2013 GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:32:13.380Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11185", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:32:13.380Z", "dateReserved": "2025-09-30T08:41:34.360Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-02-18T09:25:52.199Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Complianz \u2013 GDPR/CCPA Cookie Consent", "vendor": "complianz", "versions": [{"lessThanOrEqual": "7.4.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Complianz \u2013 GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}, {"lang": "es", "value": "El plugin Complianz \u2013 GDPR/CCPA Cookie Consent para WordPress es vulnerable a Cross-Site Scripting Almacenado a trav\u00e9s del shortcode 'cmplz-accept-link' del plugin en todas las versiones hasta la 7.4.3, inclusive, debido a una sanitizaci\u00f3n de entrada y escape de salida insuficientes en los atributos proporcionados por el usuario. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, inyecten scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cada vez que un usuario acceda a una p\u00e1gina inyectada."}], "id": "CVE-2025-11185", "lastModified": "2026-06-17T08:29:48.870", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11185", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-18T12:24:49.624286Z", "version": "2.0.3"}}]}, "published": "2026-02-18T10:16:13.340", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.4.2/documents/class-document.php#L1174"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.4.2/documents/class-document.php#L21"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f0533fca-a4de-44f0-bea0-1df6a41709ca?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.4.3]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Complianz \u2013 GDPR/CCPA Cookie Consent", "source": "cna", "vendor": "complianz"}, "product": "complianz_\u2013_gdpr/ccpa_cookie_consent", "vendor": "complianz"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-21T00:14:02.895210+00:00", "value": {"mitigation_remediation": ["Upgrade the Complianz plugin to version 7.4.4 or later to remove the vulnerable shortcode processing logic.", "Remove or replace any existing cmplz\u2011accept\u2011link shortcodes from posts, pages, or widgets, and audit content for injected scripts.", "Restrict contributor\u2011level or higher user roles from editing or creating content until the patch is applied, or implement stricter permission controls that limit use of shortcodes.", "Flush caches or restart the WordPress site to ensure that any stored malicious content is cleared."], "summary": {"action": "Apply patch", "impact": "Stored cross\u2011site scripting via plugin shortcode leading to arbitrary script execution for users accessing affected pages"}, "threat_synthesis": {"affected_systems": "The flaw impacts the Complianz \u2013 GDPR/CCPA Cookie Consent WordPress plugin, versions up to and including 7.4.3. Sites that are running any of these versions and that expose the cmplz\u2011accept\u2011link shortcode to contributor\u2011level or higher users are affected. Specific product names are derived from the CNA data, and no further version details beyond 7.4.3 are provided in the source.", "description_and_impact": "The Vulnerable Complianz \u2013 GDPR/CCPA Cookie Consent plugin allows stored cross\u2011site scripting by way of its cmplz\u2011accept\u2011link shortcode. Because input supplied to attributes of the shortcode is neither sanitized nor escaped, an attacker can inject arbitrary JavaScript that will execute in the browsers of all users who view the injected page. This capability permits a wide range of malicious actions, such as session hijacking, credential theft, or defacement, and, due to the plugin's presence on WordPress sites, it can affect any site that has used this shortcode.", "risk_and_exploitability": "The CVSS score of 6.4 indicates a moderate severity, while the EPSS score of less than 1% shows a very low but non\u2011zero probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, suggesting no large\u2011scale exploitation has been reported. An attacker must be authenticated with contributor privileges or higher and must have the ability to add or edit content containing the shortcode. Successful exploitation would allow the attacker to embed malicious scripts that execute on every visitor\u2019s browser, potentially compromising credentials, data, or the site\u2019s reputation."}}}}, "created": "2026-02-19T10:20:26.265743+00:00", "updated": "2026-04-21T00:15:16.135260+00:00", "vendors": ["complianz", "complianz$PRODUCT$complianz_\u2013_gdpr/ccpa_cookie_consent", "wordpress", "wordpress$PRODUCT$wordpress"]}