Input validation vulnerability in Complianz – GDPR/CCPA Cookie Consent 6.4.4

The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress can be vulnerable to security threats if it is not up to date. In versions up to and including 6.4.4, the plugin is missing protection from a type of attack called Cross-Site Request Forgery (CSRF). This type of attack allows unauthenticated attackers to delete files from the Complianz ‘snapshots’ folder if they can get a site administrator to click on a link or perform some other action. To prevent this from happening, it is important to keep the plugin up to date.