CVE-2026-65498
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
The Complianz plugin versions 7.5.0 and earlier are vulnerable to unauthenticated sensitive data exposure. Unauthenticated attackers can access confidential information.
Risk Assessment
The risk involves the possibility of sensitive data leakage, such as user consent data, which can compromise privacy and regulatory compliance.
Recommendation
It is recommended to update the Complianz plugin to a version newer than 7.5.0 that fixes this vulnerability.
Other vulnerabilities in Complianz
See all- CVE-2026-65497High
The Complianz plugin versions up to 7.5.0 contain a PHP Object Injection vulnerability exploitable by an administrator. An attacker with admin privileges can inject a malicious PHP object.
- CVE-2026-65496Medium
The Complianz plugin versions 7.5.0 and earlier have a Server-Side Request Forgery (SSRF) vulnerability exploitable by an author. A user with author role can force the server to send requests to internal resources.
Original NVD description (English source)
Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.