[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fw4TrL7j9afZvhmAH4N9zUObc5ST5Af6-KB-yuLx41pk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":60,"crawl_stats":37,"alternatives":68,"analysis":165,"fingerprints":1197},"cookies-and-content-security-policy","Cookies and Content Security Policy","2.37","Johan Jonk Stenström","https:\u002F\u002Fprofiles.wordpress.org\u002Fjonkastonka\u002F","\u003Cp>\u003Cstrong>Be fully GDPR and CCPA compliant through Content Security Policy.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Block cookies and unwanted external content by setting Content Security Policy. A modal will be shown on the front end to let the visitor choose what kind of resources to accept. It also adds a layer of security for your site since iframes, scripts and images from unknown domains are blocked.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Multilingual\u003C\u002Fstrong> support through \u003Ca href=\"https:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fpolylang.pro\u002F\" rel=\"nofollow ugc\">Polylang\u003C\u002Fa> or probably any multilingual plugin out there since this plugin follows WordPress Coding Standards. See FAQ below on how to translate with WPML or Polylang.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Quickstart:\u003C\u002Fstrong> Choose common resources from a list that are automatically added to your Domains list. So, it’s even easier to set it up! Check, check, check and check!\u003Cbr \u002F>\nUpdated regularly.\u003C\u002Fp>\n\u003Ch3>Free stickers for translators!\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Since we want this plugin to be available in as many languages as possible, I will send you a handful of the new \u003Ca href=\"https:\u002F\u002Fplugins.followmedarling.se\u002F2022\u002F02\u002Fstickers-are-in-the-house\u002F\" rel=\"nofollow ugc\">super cool stickers\u003C\u002Fa> if you translate the plugin!\u003C\u002Fstrong>\u003Cbr \u002F>\nJust translate the plugin to your language, and when it is approved, \u003Ca href=\"https:\u002F\u002Fplugins.followmedarling.se\u002F2022\u002F02\u002Fstickers-are-in-the-house\u002F#respond\" rel=\"nofollow ugc\">comment this post\u003C\u002Fa> and I’ll send it to you, totally free!\u003Cbr \u002F>\nIf you have already translated the plugin and want stickers, of course that counts too! Just comment the post.\u003C\u002Fp>\n","Be fully GDPR and CCPA compliant through Content Security Policy. Blocks cookies and unwanted external content.",10000,469239,98,67,"2026-02-17T12:58:00.000Z","6.9.4","5.0","7.4",[20,21,22,23,24],"ccpa","content-security-policy","cookie-bar","cookies","gdpr","https:\u002F\u002Fplugins.followmedarling.se\u002Fcookies-and-content-security-policy\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcookies-and-content-security-policy.2.37.zip",2,0,"2026-01-05 00:00:00","2026-03-15T15:16:48.613Z",[32,48],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2025-63019","cookies-and-content-security-policy-unauthenticated-information-exposure","Cookies and Content Security Policy \u003C= 2.34 - Unauthenticated Information Exposure","The Cookies and Content Security Policy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.34. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.",null,"\u003C=2.34","2.35","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","Exposure of Sensitive Information to an Unauthorized Actor","2026-01-19 16:50:06",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff6445bcc-b12d-419f-beca-8ee617465bf4?source=api-prod",15,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":37,"affected_versions":53,"patched_in_version":54,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":55,"updated_date":56,"references":57,"days_to_patch":59},"CVE-2023-40662","cookies-and-content-security-policy-sensitive-information-exposure","Cookies and Content Security Policy \u003C= 2.15 - Sensitive Information Exposure","The Cookies and Content Security Policy plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.15 via the cacsp_texts function. This can allow unauthenticated attackers to extract sensitive data including the administrator email address.","\u003C=2.15","2.16","2023-08-18 00:00:00","2024-01-22 19:56:02",[58],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F79e68c5b-1f1a-4af3-acf4-1a38f2d72424?source=api-prod",158,{"slug":61,"display_name":7,"profile_url":8,"plugin_count":62,"total_installs":63,"avg_security_score":64,"avg_patch_time_days":65,"trust_score":66,"computed_at":67},"jonkastonka",10,14340,90,202,72,"2026-04-04T13:11:40.468Z",[69,91,109,125,141],{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":79,"num_ratings":80,"last_updated":81,"tested_up_to":16,"requires_at_least":82,"requires_php":18,"tags":83,"homepage":86,"download_link":87,"security_score":88,"vuln_count":89,"unpatched_count":28,"last_vuln_date":90,"fetched_at":30},"cookie-notice","Cookie Notice & Compliance for GDPR \u002F CCPA","2.5.14","Humanityco","https:\u002F\u002Fprofiles.wordpress.org\u002Fhumanityco\u002F","\u003Cp>\u003Cstrong>Cookie Notice\u003C\u002Fstrong> provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes \u003Cstrong>seamless integration\u003C\u002Fstrong> with Cookie Compliance to help your site comply with the latest updates to existing consent laws.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cookie Compliance\u003C\u002Fstrong> is a fully featured Consent Management Platform (CMP) that provides automated compliance features and enhanced design controls in a state-of-the-art web application. Cookie Compliance enables websites to \u003Cstrong>take a proactive approach to data protection and consent laws\u003C\u002Fstrong>. It is the first solution to offer Intentional Consent, a new consent framework that incorporates the latest guidelines from over 100+ countries, and emerging standards from leading international organizations like the IEEE and European Center for Digital Rights (noyb.eu). Cookie Compliance provides a beautiful, multi-level experience and includes new choices and controls for site visitors to better understand and engage in data privacy decisions.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Our Cookie Compliance web application introduces a more ethical, proactive way to capture and manage consent.  This early version of the emerging Intentional Consent framework is a result of Hu-manity.co’s ongoing work with top Fortune 500 companies, governments, and standards organizations, who believe that the imbalanced relationship between consumers and corporations is unsustainable when it comes to data privacy and consent online. We are making it available for all website owners and operators who share this belief and support our mission to eliminate the dark patterns in online consent.\u003Cbr \u002F>\n  Matt Sinderbrand – Chief Platform Officer, Hu-manity.co\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Cookie Notice (plugin only)\u003C\u002Fh3>\n\u003Cp>Cookie Notice provides a simple, customizable website banner to help your website comply with certain cookie consent requirements.\u003C\u002Fp>\n\u003Ch4>Banner features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Customizable notice message\u003C\u002Fli>\n\u003Cli>Consent on click, scroll or close\u003C\u002Fli>\n\u003Cli>Multiple cookie expiry options\u003C\u002Fli>\n\u003Cli>Link to Privacy Policy page\u003C\u002Fli>\n\u003Cli>WordPress Privacy Policy page synchronization\u003C\u002Fli>\n\u003Cli>WPML and Polylang compatible\u003C\u002Fli>\n\u003Cli>SEO friendly\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Cookie Compliance (plugin + web application)\u003C\u002Fh3>\n\u003Cp>Cookie Compliance gives you access to the most up-to-date formatting guidelines and technical compliance requirements for over 100 countries and legal jurisdictions.\u003C\u002Fp>\n\u003Ch4>Banner features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Intentional Consent\u003C\u002Fstrong> provides 3 equal buttons to give site visitors the ability to accept none, some, or all cookies through packaged choices called Data Access Levels. Data Access Levels improve consent conversion and eliminate the dark pattern of deceptive, non-equal choices in the first layer. \u003Cem>Complies with equal choice principle prescribed under GDPR and other data protection laws.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent duration selector\u003C\u002Fstrong> gives visitor control over how long their consent remains valid for your site.  \u003Cem>Enables your site to align with recent guidelines from EU Data Protection Authorities, which state that cookie consent should be valid for no longer than a period of 6 months.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cookie purpose categories\u003C\u002Fstrong> make it easy for website visitors to customize their consent by category. \u003Cem>Complies with affirmative, opt-in consent requirements prescribed under GDPR and other data protection laws.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent metrics\u003C\u002Fstrong> displays the visitor’s consent record and a list of blocked \u002F allowed 3rd parties directly in the expanded level of the banner. \u003Cem>Complies with latest guidance from EU Data Protection Authorities like CNIL (France) and ICO (UK). \u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Privacy Paper\u003C\u002Fstrong> provides helpful information to improve visitor comprehension and understanding of the data sharing risks and benefits. Allows you to summarize core components of your sites privacy notice and \u003Cem>aligns with the informed principle prescribed by GDPR rules for valid consent capture. \u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configurable Privacy Contact\u003C\u002Fstrong> allows you to provide contact information for a business’ data privacy admin, as well as helpful links to data subject request forms and other data privacy resources. \u003Cem>Aligns with the informed principle prescribed by GDPR rules for valid consent capture.\u003C\u002Fem>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Web Application features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Consent analytics dashboard\u003C\u002Fstrong> shows event data for number of visits and provides a “trust score” to help you track how site visitors are setting their consent. Make adjustments to your banner to improve your cookie acceptance rate and monitor progress via the consent activity graph.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Default configurations\u003C\u002Fstrong> for GDPR, CCPA and more help to remove dark patterns and allow for quick and easy deployment of the consent banner without any guesswork. Customize the design of any default configuration to match the look and feel of your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic script blocking\u003C\u002Fstrong> blocks all non-essential cookie scripts and iFrames by default and \u003Cem>complies with valid consent rules under GDPR and other data protection laws\u003C\u002Fem>; in order to be compliant, your site must record visitor consent before setting or sending cookies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Consent Mode\u003C\u002Fstrong> ensures that your website can still gather valuable insights and perform effectively while respecting users’ privacy preferences by \u003Cem>dynamically adjusting the behavior of Google services according to user consent.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Facebook Consent Mode\u003C\u002Fstrong> allows your website to \u003Cem>measure the impact of your ads on Facebook\u003C\u002Fem>, track website activities and conversions and automatically deliver ads to Facebook if the user has agreed to.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent record storage\u003C\u002Fstrong> automatically stores a record of each consent and makes these records available for export. \u003Cem>Complies with proof-of-consent requirements prescribed under GDPR and other data protection laws.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multilingual support\u003C\u002Fstrong> automatically translates all banner text strings and allows you to provide custom translations for every text field to ensure visitors get a consistent consent experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multidomain management\u003C\u002Fstrong> allows you to manage additional Free or Professional domains under a single account and enables you to customize banner configuration and design for each domain independently.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Cookie Compliance proactive approach:\u003C\u002Fh4>\n\u003Cp>For all businesses, the resources required to stay ahead of the latest regulations increases with the passage of each new law. With enforcement of compliance violations increasing daily, we believe it is critical for us as a trusted consent vendor to do everything in our power to help you stay ahead of these laws and remove the risk to your business\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cookie Compliance covers all current and upcoming regulations:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>GDPR (EU)\u003C\u002Fli>\n\u003Cli>ePrivacy Directive (EU)\u003C\u002Fli>\n\u003Cli>ePrivacy Regulation (EU)\u003C\u002Fli>\n\u003Cli>PECR (UK)\u003C\u002Fli>\n\u003Cli>LGPD (Brazil)\u003C\u002Fli>\n\u003Cli>PIPEDA (Canada)\u003C\u002Fli>\n\u003Cli>PDPB (India)\u003C\u002Fli>\n\u003Cli>CCPA (California, US)\u003C\u002Fli>\n\u003Cli>VCDPA (Virginia, US)\u003C\u002Fli>\n\u003Cli>Colorado Privacy Act (US)\u003C\u002Fli>\n\u003Cli>CPRA (California, US)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Cookie Compliance incorporates all recent formatting guidance:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>European Data Protection Supervisor (EDPS)\u003C\u002Fli>\n\u003Cli>ICO (United Kingdom)\u003C\u002Fli>\n\u003Cli>CNIL (France)\u003C\u002Fli>\n\u003Cli>GPDP (Italy)\u003C\u002Fli>\n\u003Cli>BfDl (Germany)\u003C\u002Fli>\n\u003Cli>AEPD (Spain)\u003C\u002Fli>\n\u003Cli>European Center for Digital Rights (noyb.eu)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Cookie Compliance targets dark patterns\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Dark Patterns are user interface (UI) techniques that push site visitors to make decisions (such as agreeing to the installation of cookies on their devices) that they might not otherwise make. The most common Dark Pattern is the lack of an equal “reject all” button on the first layer of the consent notice. Dark Patterns are explicitly banned under GDPR and other data protection laws.\u003C\u002Fp>\n\u003Cp>As a part of our proactive approach, Cookie Compliance is configured by default to prevent Dark Patterns through our unique Intentional Consent design.\u003C\u002Fp>\n","Cookie Notice allows you to you elegantly inform users that your site uses cookies and helps you comply with GDPR, CCPA and other data privacy laws.",900000,36171663,96,3020,"2026-03-04T01:02:00.000Z","4.9.6",[20,84,23,24,85],"consent","privacy","https:\u002F\u002Fcookie-compliance.co\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcookie-notice.2.5.14.zip",95,6,"2025-11-21 16:28:14",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":11,"downloaded":99,"rating":79,"num_ratings":100,"last_updated":101,"tested_up_to":16,"requires_at_least":102,"requires_php":103,"tags":104,"homepage":106,"download_link":107,"security_score":108,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"pressidium-cookie-consent","Pressidium Cookie Consent","1.9.1","pressidium","https:\u002F\u002Fprofiles.wordpress.org\u002Fpressidium\u002F","\u003Cp>Pressidium Cookie Consent makes it easy to add a stylish, customizable cookie consent banner to your website and conditionally load third-party scripts (analytics, performance, targeting, etc.) based on the user-selected preferences to help you comply with EU GDPR cookie law, CCPA, and similar regulations.\u003C\u002Fp>\n\u003Ch4>⚙️ Fully customizable\u003C\u002Fh4>\n\u003Cp>Easily modify the cookie consent banner and settings modal text. Pick one of the built-in color presets to match your website’s aesthetic, or adjust the color of individual components via our convenient color picker. Choose from a variety of layouts, positions, and transitions directly from the WordPress dashboard.\u003C\u002Fp>\n\u003Ch4>🪶 Lightweight\u003C\u002Fh4>\n\u003Cp>The plugin is built on top of the Cookie Consent JS library by Orest Bida, a standalone vanilla JavaScript library with no third-party dependencies, that loads blazingly fast and won’t slow down your website.\u003C\u002Fp>\n\u003Ch4>♿ Accessible\u003C\u002Fh4>\n\u003Cp>An a11y friendly plugin — fully accessible and WAI-ARIA compliant.\u003C\u002Fp>\n\u003Ch4>🌐 Translatable\u003C\u002Fh4>\n\u003Cp>Modify any text in the cookie consent banner and settings modal, and provide translations. Choose the language auto-detection strategy you prefer — either  read the user’s browser language or read the markup of the current page to identify its primary language.\u003C\u002Fp>\n\u003Ch4>📱 Responsive\u003C\u002Fh4>\n\u003Cp>Fully responsive and mobile-friendly cookie consent banner and settings modal.\u003C\u002Fp>\n\u003Ch4>🙅 Block scripts\u003C\u002Fh4>\n\u003Cp>Control which scripts are loaded based on the user’s preferences. List the URLs of the scripts you’d like to block (both exact matches and regular expressions are supported) and prevent them from running until the user has given consent.\u003C\u002Fp>\n\u003Ch4>🧹 Auto-clear cookies\u003C\u002Fh4>\n\u003Cp>Automatically delete cookies when a user opts-out of a specific category inside cookie settings.\u003C\u002Fp>\n\u003Ch4>✋ Force consent\u003C\u002Fh4>\n\u003Cp>Block the user from interacting with the page until they consent to your cookie policy.\u003C\u002Fp>\n\u003Ch4>🔁 Re-consent\u003C\u002Fh4>\n\u003Cp>Ask users to consent again when you update your cookie policy.\u003C\u002Fp>\n\u003Ch4>📝 Consent records\u003C\u002Fh4>\n\u003Cp>Record user consents to be able to provide proof of consent for auditing purposes.\u003C\u002Fp>\n\u003Ch4>🎛️ Floating settings button\u003C\u002Fh4>\n\u003Cp>Add a floating settings button to your website that allows users to change their cookie preferences at any time.\u003C\u002Fp>\n\u003Ch4>🤖 Hide from bots\u003C\u002Fh4>\n\u003Cp>Automatically parse the user agent to detect bots, crawlers, and webdrivers. If one is detected, you have the option to hide the cookie consent banner from them.\u003C\u002Fp>\n\u003Ch4>🧩 Google Consent Mode (GCM) integration\u003C\u002Fh4>\n\u003Cp>Integrate with Google Consent Mode (GCM) to adjust how Google tags behave based on the user’s consent preferences. Supports both Google tag (gtag.js) and Google Tag Manager (GTM) implementations.\u003C\u002Fp>\n\u003Ch4>🚪 Google tag gateway integration\u003C\u002Fh4>\n\u003Cp>One-click PHP proxy to quickly route traffic to Google tag gateway for advertisers.\u003C\u002Fp>\n\u003Ch4>✨ AI integration\u003C\u002Fh4>\n\u003Cp>Integrate with AI to generate translations and cookie descriptions. Supports both GPT and Gemini.\u003C\u002Fp>\n\u003Ch4>🧱 Block for the WordPress Block Editor\u003C\u002Fh4>\n\u003Cp>Add the \u003Cstrong>Pressidium Cookies Table\u003C\u002Fstrong> block for the Block Editor to display a dynamic table listing all cookies under the selected category, making it easy for users to understand what cookies are being used on the site.\u003C\u002Fp>\n\u003Ch4>⌨️ Control it programmatically\u003C\u002Fh4>\n\u003Cp>Programmatically control the plugin. Conditionally show\u002Fhide the cookie consent banner and\u002For the settings modal, accept one (or more) cookie categories, erase cookies, load previously blocked scripts, etc.\u003C\u002Fp>\n\u003Ch4>About Pressidium\u003C\u002Fh4>\n\u003Cp>This is a free and open source WordPress plugin developed by Pressidium®. Pressidium offers Managed WordPress hosting for web professionals designed to optimize the performance, security, and scalability of WordPress websites. With a strong emphasis on reliability, Pressidium utilizes high-available architecture to ensure your website’s uptime.\u003C\u002Fp>\n","Lightweight, user-friendly and customizable cookie consent banner to help you comply with the EU GDPR cookie law and CCPA regulations.",58804,35,"2025-12-09T13:06:00.000Z","6.0","8.1",[20,84,105,23,24],"cookie","https:\u002F\u002Fgithub.com\u002Fpressidium\u002Fpressidium-cookie-consent\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpressidium-cookie-consent.1.9.1.zip",100,{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":28,"downloaded":117,"rating":28,"num_ratings":28,"last_updated":118,"tested_up_to":119,"requires_at_least":120,"requires_php":121,"tags":122,"homepage":123,"download_link":124,"security_score":108,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"cookiejar","CookieJar","1.0.0","Kenneth “Demetrius” Weaver","https:\u002F\u002Fprofiles.wordpress.org\u002Fmydeme\u002F","\u003Cp>CookieJar provides a lightweight cookie consent banner with basic GDPR\u002FCCPA compliance tools.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Accessible banner with Accept, Reject, and Preferences\u003C\u002Fli>\n\u003Cli>Basic categories: Necessary, Functional, Analytics, Advertising\u003C\u002Fli>\n\u003Cli>Optional Do Not Sell (CPRA) when applicable\u003C\u002Fli>\n\u003Cli>GA4 Consent Mode v2 signal updates (optional)\u003C\u002Fli>\n\u003Cli>Basic consent logging (cached mode)\u003C\u002Fli>\n\u003Cli>Multilanguage (free: up to 2 languages)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This free version is designed for WordPress.org policies: no ads in dashboard, no nagging notices, and all assets loaded locally.\u003C\u002Fp>\n\u003Ch3>Asset Licensing\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>All plugin code is GPLv2 or later.\u003C\u002Fli>\n\u003Cli>All bundled images, SVGs, and icons in \u003Ccode>assets\u002F\u003C\u002Fcode> are original works by DemeWebsolutions.com (My Deme, LLC) and released under GPLv2 or later.\u003C\u002Fli>\n\u003Cli>No remote CDNs are used; all assets load locally.\u003C\u002Fli>\n\u003C\u002Ful>\n","Cookie consent banner and basic compliance tools (GDPR\u002FCCPA) with simple setup and accessible UI.",191,"2025-11-08T02:53:00.000Z","6.8.5","5.9","7.2",[20,84,23,24,85],"","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcookiejar.1.0.0.zip",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":28,"downloaded":133,"rating":28,"num_ratings":28,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":18,"tags":137,"homepage":138,"download_link":139,"security_score":140,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"wpss-cookies","WPSS Cookies","1.3.5","Angelo Rocha","https:\u002F\u002Fprofiles.wordpress.org\u002Fangelorocha\u002F","\u003Cp>Simple, but very functional, cookie consent plugin.\u003C\u002Fp>\n","A simple way to add a cookie consent message in your WordPress",1066,"2021-10-27T14:42:00.000Z","5.8.13","5.5",[20,84,105,23,24],"https:\u002F\u002Fgithub.com\u002Fwpsuperstars\u002Fwpss_cookies","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpss-cookies.1.3.5.zip",85,{"slug":142,"name":143,"version":144,"author":145,"author_profile":146,"description":147,"short_description":148,"active_installs":149,"downloaded":150,"rating":151,"num_ratings":152,"last_updated":153,"tested_up_to":16,"requires_at_least":154,"requires_php":155,"tags":156,"homepage":160,"download_link":161,"security_score":162,"vuln_count":163,"unpatched_count":28,"last_vuln_date":164,"fetched_at":30},"gdpr-cookie-compliance","GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law","5.0.11","Moove Agency","https:\u002F\u002Fprofiles.wordpress.org\u002Fmooveagency\u002F","\u003Cp>\u003Cstrong>Prepare your website for cookie consent requirements related to GDPR, CCPA, DSGVO, EU cookie law and notice requirements with this incredibly powerful, easy-to-use, well supported and 100% free WordPress plugin.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Local Data Storage\u003C\u002Fstrong> – all user data is stored locally on your website only – we do not collect or store any of your user data on our servers\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Simple\u003C\u002Fstrong> to use — install & setup in seconds\u003C\u002Fli>\n\u003Cli>Give your users \u003Cstrong>full control\u003C\u002Fstrong> over cookies stored on their computer, including the ability for users to \u003Cstrong>revoke their consent\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Direct integration of \u003Cstrong>GTM, Google Analytics, Meta Pixel, GTM4WP\u003C\u002Fstrong> and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Consent Mode v2\u003C\u002Fstrong> fully supported\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fully customisable\u003C\u002Fstrong> – upload your own logo, colours, fonts\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fully editable\u003C\u002Fstrong> – change all text\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible\u003C\u002Fstrong> – decide which scripts will be loaded by default or only when the user gives consent\u003C\u002Fli>\n\u003Cli>\u003Cstrong>‘Accept’\u003C\u002Fstrong>, \u003Cstrong>‘Reject’\u003C\u002Fstrong>, ‘Close’ and ‘Settings’ buttons & you can also change their order\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Consent expiration\u003C\u002Fstrong> settings\u003C\u002Fli>\n\u003Cli>Link to \u003Cstrong>Privacy Policy\u003C\u002Fstrong> page\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mobile responsive\u003C\u002Fstrong> design\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO friendly\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Optimized for \u003Cstrong>WCAG & ADA\u003C\u002Fstrong> accessibility guidelines\u003C\u002Fli>\n\u003Cli>WPML, QTranslate, WP Multilang, TranslatePress and Polylang compatible, .pot file for translations included\u003C\u002Fli>\n\u003Cli>Supports all major \u003Cstrong>caching\u003C\u002Fstrong> servers and plugins\u003C\u002Fli>\n\u003Cli>Available in \u003Cstrong>22 languages\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Optimised for PHP 7 and PHP 8\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Premium Features Available\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Consent Log\u003C\u002Fstrong> – stores user consent information to prove that consent was given\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Geo-location\u003C\u002Fstrong> – the Cookie Consent Banner can be shown to visitors from the European Union or selected countries only (ie. Canada, California etc.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Site Kit integration\u003C\u002Fstrong> – our plugin supports the Google Site Kit natively\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cookie wall \u002F Full-screen layout\u003C\u002Fstrong> – if enabled, the Cookie Consent Banner will be display in a full screen mode, and force users to either accept or reject cookies before they can see your content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export & import settings\u003C\u002Fstrong> – transfer your custom settings between sites with ease\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Multisite features\u003C\u002Fstrong> – you can manage the plugin settings globally, and clone them from one site to another within your multi-site setup. You can also sync users consent between individual subsites on your multisite network\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Accept on Scroll \u002F Hide timer\u003C\u002Fstrong> – allow users to accept cookies by scrolling down the page OR by setting a timer (ie. Hide banner after 5 seconds)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Renew Consent\u003C\u002Fstrong> – ask users to renew their consent if there is a change in privacy or cookie policy on your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>iFrame Blocker\u003C\u002Fstrong> – blocks users from viewing 3rd party resources (such as Youtube) until they accept cookies\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Language Specific Scripts\u003C\u002Fstrong> – insert different Tag Manager Scripts for different languages, supports WPML and other language plugins\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Premium Shortcodes\u003C\u002Fstrong> that can be added to your ‘Privacy & Cookie Policy’ and allow your users to manage their consent with ease.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide Cookie Banner\u003C\u002Fstrong> allows you to hide the Cookie Notice Banner on selected pages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cookie Declaration\u003C\u002Fstrong> allows you to declare the exact type of cookies that your site uses, including the cookie name, provider, purpose and expiration\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Analytics\u003C\u002Fstrong> – stats and charts showing you how many users accepted your cookies (all anonymous)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fast Premium Support\u003C\u002Fstrong> from our friendly team\u003C\u002Fli>\n\u003Cli>\u003Cstrong>12 months\u003C\u002Fstrong> of premium updates included\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.mooveagency.com\u002Fwordpress-plugins\u002Fgdpr-cookie-compliance\u002F\" rel=\"nofollow ugc\">Download Premium Add-on here\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Demo Video\u003C\u002Fh3>\n\u003Cp>You can view a demo of the plugin here:\u003C\u002Fp>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F255655268\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Ch3>Testimonials\u003C\u002Fh3>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>“The only free GDPR plugin that actually works.” – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fthe-only-free-gdpr-plugin-that-actually-works\u002F\" rel=\"ugc\">Jamie\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>“One of the best GDPR implementation for WordPress.” – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fone-of-the-best-gdpr-implementation-for-wordpress\u002F\" rel=\"ugc\">webinvaders\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>“The best free solution for GDPR.” – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fthe-best-free-solution-for-the-gdpr\u002F\" rel=\"ugc\">Distrix\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>“Great plugin, great support. I’ve tried many, this is probably the best for multisite installations.” – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fgreat-plugin-great-support-1157\u002F\" rel=\"ugc\">pattihis\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Live Examples\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>You can choose to setup our cookie plugin in any way that you like. \u003C\u002Fli>\n\u003Cli>We have created the plugin with as much flexibility as possible as organisations interpret the Cookie Law and Cookie Consent Policy differently.\u003C\u002Fli>\n\u003Cli>A few examples of how you can setup our plugin in various ways are below:\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>OPTION A\u003C\u002Fstrong>\u003Cbr \u002F>\nNo cookies are stored on users’ computers until the user accepts cookies.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.mooveagency.com\u002Fwordpress-plugins\u002Fgdpr-cookie-compliance\u002F\" rel=\"nofollow ugc\">Example 1\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>OPTION B\u003C\u002Fstrong>\u003Cbr \u002F>\nThe ‘Full-Screen \u002F Cookie Wall’ option is used (a premium feature).\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.teneo.net\u002F\" rel=\"nofollow ugc\">Example 2\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>OTHER OPTIONS\u003C\u002Fstrong>\u003Cbr \u002F>\nThere are many other settings available that you can use to create your own unique Cookie Consent Banner and satisfy the Cookie Compliance Law – our plugin is very flexible.\u003C\u002Fp>\n\u003Ch3>Custom Layout\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>You can also create your own custom front-end layout.\u003C\u002Fli>\n\u003Cli>Simply copy the “gdpr-modules” folder from the plugin directory to your theme directory. \u003C\u002Fli>\n\u003Cli>If you do this, your changes will be retained even if you update the plugin in future. \u003C\u002Fli>\n\u003Cli>Any customisation should be implemented by experienced developers only.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Flexible\u003C\u002Fh3>\n\u003Cp>Our cookie plugin is very flexible and especially useful in preparing your site for the following cookie law, data protection and privacy regulations:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>GDPR\u003C\u002Fstrong>: The General Data Protection Regulation, ePrivacy Directive, ePrivacy Regulation (European Union)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CCPA\u003C\u002Fstrong>: The California Consumer Privacy Act (California, United States)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PECR\u003C\u002Fstrong>: The Privacy and Electronic Communications Regulations (UK)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AAP\u003C\u002Fstrong>: Australia’s Privacy Principles (Australia)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PIPEDA\u003C\u002Fstrong>: The Personal Information Protection and Electronic Documents Act (Canada) \u003C\u002Fli>\n\u003Cli>\u003Cstrong>LGPD\u003C\u002Fstrong>: The Brazilian General Data Protection Law (Brazil)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>VCDPA, CPRA, ICO, GPDP, DSGVO, BfDl, CNIL, AEPD, PDPB, DPA, PDPA, DPA, PDPA, TTDSG, POPIA , APA, ePrivacy, COPPA, CASL, Australian Privacy Principles, The Marco Civil Privacy Act 1988\u003C\u002Fstrong> and other cookie law, data protection and privacy regulations\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>About us\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.mooveagency.com\u002F\" rel=\"nofollow ugc\">Moove Agency\u003C\u002Fa> is a premium supplier of quality WordPress plugins, services and support. \u003Ca href=\"https:\u002F\u002Fwww.mooveagency.com\u002Fwordpress-plugins\u002F\" rel=\"nofollow ugc\">Visit our WordPress site\u003C\u002Fa> to learn more.\u003C\u002Fp>\n\u003Ch3>Disclaimer\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>THIS PLUGIN DOES NOT MAKE YOUR WEBSITE COMPLIANT. YOU ARE RESPONSIBLE FOR ENSURING THAT ALL COOKIE LAW REQUIREMENTS ARE MET ON YOUR WEBSITE.\u003C\u002Fli>\n\u003C\u002Ful>\n","Cookie notice banner for GDPR, CCPA, EU cookie law, data protection and privacy regulations and other cookie law and consent notice requirements on yo …",300000,12221542,92,204,"2026-02-02T13:03:00.000Z","4.5","6.4",[20,157,158,159,24],"cookie-banner","cookie-consent","dsgvo","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgdpr-cookie-compliance\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgdpr-cookie-compliance.5.0.11.zip",97,9,"2025-02-23 00:00:00",{"attackSurface":166,"codeSignals":266,"taintFlows":604,"riskAssessment":1185,"analyzedAt":1196},{"hooks":167,"ajaxHandlers":245,"restRoutes":254,"shortcodes":263,"cronEvents":264,"entryPointCount":265,"unprotectedCount":230},[168,174,177,181,184,189,192,197,200,204,208,213,215,219,223,227,229,232,235,238,240],{"type":169,"name":170,"callback":171,"file":172,"line":173},"action","init","cacsp_load_textdomain","cookies-and-content-security-policy.php",20,{"type":169,"name":170,"callback":175,"file":172,"line":176},"cacsp_check_activated",32,{"type":169,"name":178,"callback":179,"priority":62,"file":172,"line":180},"wp_enqueue_scripts","enqueue_cacsp_front",43,{"type":169,"name":182,"callback":179,"priority":62,"file":172,"line":183},"login_enqueue_scripts",44,{"type":169,"name":185,"callback":186,"priority":187,"file":172,"line":188},"wp_head","cacsp_options_settings_colors",12,118,{"type":169,"name":190,"callback":186,"priority":187,"file":172,"line":191},"login_head",119,{"type":193,"name":194,"callback":195,"file":172,"line":196},"filter","body_class","body_class_cacsp_front",300,{"type":193,"name":198,"callback":195,"file":172,"line":199},"login_body_class",301,{"type":169,"name":201,"callback":202,"file":172,"line":203},"send_headers","send_headers_cacsp",318,{"type":169,"name":205,"callback":206,"file":172,"line":207},"admin_enqueue_scripts","enqueue_cacsp_back",327,{"type":169,"name":209,"callback":210,"file":211,"line":212},"wp_footer","modal_content_security_policy","inc\\modal-cacsp.php",5,{"type":169,"name":214,"callback":210,"file":211,"line":89},"login_footer",{"type":169,"name":216,"callback":217,"file":218,"line":89},"network_admin_menu","cacsp_new_menu_item_network","inc\\network.php",{"type":169,"name":170,"callback":220,"file":221,"line":222},"cacsp_add_wpsc_cookie_banner","inc\\plugin-compability.php",8,{"type":169,"name":185,"callback":224,"priority":28,"file":225,"line":226},"closure","inc\\set-cacsp.php",151,{"type":169,"name":185,"callback":224,"priority":28,"file":225,"line":228},156,{"type":169,"name":185,"callback":224,"priority":230,"file":225,"line":231},1,176,{"type":169,"name":233,"callback":224,"file":225,"line":234},"rest_api_init",194,{"type":169,"name":201,"callback":236,"priority":62,"file":225,"line":237},"cacsp_init",218,{"type":169,"name":182,"callback":236,"priority":62,"file":225,"line":239},219,{"type":169,"name":241,"callback":242,"file":243,"line":244},"admin_menu","cacsp_menu","inc\\settings-cacsp.php",71,[246,252],{"action":247,"nopriv":248,"callback":247,"hasNonce":249,"hasCapCheck":248,"file":250,"line":251},"cacsp_insert_consent_data",false,true,"inc\\functions.php",253,{"action":247,"nopriv":249,"callback":247,"hasNonce":249,"hasCapCheck":248,"file":250,"line":253},254,[255],{"namespace":256,"route":257,"methods":258,"callback":260,"permissionCallback":261,"file":225,"line":262},"cacsp\u002Fv1","\u002Ftexts\u002F",[259],"GET","cacsp_texts","__return_true",195,[],[],3,{"dangerousFunctions":267,"sqlUsage":268,"outputEscaping":275,"fileOperations":27,"externalRequests":28,"nonceChecks":212,"capabilityChecks":269,"bundledLibraries":603},[],{"prepared":269,"raw":230,"locations":270},4,[271],{"file":272,"line":273,"context":274},"inc\\settings-cacsp-tab-consent.php",153,"$wpdb->get_results() with variable interpolation",{"escaped":276,"rawEcho":117,"locations":277},123,[278,281,283,285,287,289,290,292,294,295,297,299,301,302,304,306,308,309,311,313,314,316,317,319,321,323,325,327,329,331,333,335,336,338,340,341,343,345,346,347,348,350,352,355,357,358,359,361,363,365,367,368,370,371,373,375,376,378,380,382,384,386,388,390,392,393,395,397,398,400,403,404,406,407,409,411,412,414,416,418,420,421,423,425,427,429,431,433,435,436,437,439,441,442,443,444,446,447,448,449,450,452,454,456,457,459,461,462,463,464,465,467,469,470,472,474,475,477,479,481,483,485,487,489,491,493,495,497,498,500,502,504,506,508,510,513,514,515,517,518,519,521,523,524,526,527,529,531,533,535,537,539,541,543,544,546,548,550,552,554,556,558,560,562,563,565,566,567,568,569,570,571,572,574,575,576,577,579,581,582,583,584,585,586,589,591,593,595,597,599,601],{"file":172,"line":279,"context":280},295,"raw output",{"file":211,"line":282,"context":280},34,{"file":211,"line":284,"context":280},36,{"file":211,"line":286,"context":280},39,{"file":211,"line":288,"context":280},46,{"file":211,"line":288,"context":280},{"file":211,"line":291,"context":280},47,{"file":211,"line":293,"context":280},50,{"file":211,"line":293,"context":280},{"file":211,"line":296,"context":280},51,{"file":211,"line":298,"context":280},57,{"file":211,"line":300,"context":280},63,{"file":211,"line":14,"context":280},{"file":211,"line":303,"context":280},73,{"file":211,"line":305,"context":280},76,{"file":211,"line":307,"context":280},79,{"file":211,"line":307,"context":280},{"file":211,"line":310,"context":280},80,{"file":211,"line":312,"context":280},83,{"file":211,"line":312,"context":280},{"file":211,"line":315,"context":280},84,{"file":211,"line":13,"context":280},{"file":211,"line":318,"context":280},99,{"file":211,"line":320,"context":280},114,{"file":211,"line":322,"context":280},116,{"file":211,"line":324,"context":280},117,{"file":211,"line":326,"context":280},132,{"file":211,"line":328,"context":280},134,{"file":211,"line":330,"context":280},135,{"file":211,"line":332,"context":280},150,{"file":211,"line":334,"context":280},152,{"file":211,"line":273,"context":280},{"file":211,"line":337,"context":280},166,{"file":211,"line":339,"context":280},172,{"file":211,"line":231,"context":280},{"file":218,"line":342,"context":280},45,{"file":218,"line":344,"context":280},56,{"file":218,"line":14,"context":280},{"file":218,"line":305,"context":280},{"file":225,"line":334,"context":280},{"file":225,"line":349,"context":280},178,{"file":225,"line":351,"context":280},180,{"file":353,"line":354,"context":280},"inc\\settings-cacsp-tab-activate.php",7,{"file":353,"line":356,"context":280},23,{"file":353,"line":282,"context":280},{"file":353,"line":342,"context":280},{"file":360,"line":342,"context":280},"inc\\settings-cacsp-tab-colors.php",{"file":360,"line":362,"context":280},53,{"file":360,"line":364,"context":280},61,{"file":360,"line":366,"context":280},69,{"file":360,"line":310,"context":280},{"file":360,"line":369,"context":280},88,{"file":360,"line":79,"context":280},{"file":360,"line":372,"context":280},107,{"file":360,"line":374,"context":280},115,{"file":360,"line":276,"context":280},{"file":360,"line":377,"context":280},131,{"file":360,"line":379,"context":280},139,{"file":360,"line":381,"context":280},147,{"file":360,"line":383,"context":280},155,{"file":360,"line":385,"context":280},163,{"file":360,"line":387,"context":280},171,{"file":360,"line":389,"context":280},179,{"file":360,"line":391,"context":280},187,{"file":360,"line":262,"context":280},{"file":360,"line":394,"context":280},203,{"file":360,"line":396,"context":280},211,{"file":360,"line":239,"context":280},{"file":272,"line":399,"context":280},369,{"file":401,"line":402,"context":280},"inc\\settings-cacsp-tab-design.php",37,{"file":401,"line":291,"context":280},{"file":401,"line":405,"context":280},59,{"file":401,"line":244,"context":280},{"file":401,"line":408,"context":280},91,{"file":401,"line":410,"context":280},103,{"file":401,"line":374,"context":280},{"file":401,"line":413,"context":280},127,{"file":401,"line":415,"context":280},137,{"file":417,"line":62,"context":280},"inc\\settings-cacsp-tab-domains.php",{"file":417,"line":419,"context":280},11,{"file":417,"line":187,"context":280},{"file":417,"line":422,"context":280},13,{"file":417,"line":424,"context":280},16,{"file":417,"line":426,"context":280},17,{"file":417,"line":428,"context":280},64,{"file":417,"line":430,"context":280},65,{"file":417,"line":432,"context":280},66,{"file":417,"line":434,"context":280},68,{"file":417,"line":244,"context":280},{"file":417,"line":305,"context":280},{"file":417,"line":438,"context":280},77,{"file":417,"line":440,"context":280},78,{"file":417,"line":310,"context":280},{"file":417,"line":312,"context":280},{"file":417,"line":369,"context":280},{"file":417,"line":445,"context":280},89,{"file":417,"line":64,"context":280},{"file":417,"line":151,"context":280},{"file":417,"line":88,"context":280},{"file":417,"line":108,"context":280},{"file":417,"line":451,"context":280},101,{"file":417,"line":453,"context":280},102,{"file":417,"line":455,"context":280},104,{"file":417,"line":372,"context":280},{"file":458,"line":419,"context":280},"inc\\settings-cacsp-tab-quickstart.php",{"file":458,"line":460,"context":280},58,{"file":458,"line":366,"context":280},{"file":458,"line":310,"context":280},{"file":458,"line":408,"context":280},{"file":458,"line":453,"context":280},{"file":458,"line":466,"context":280},113,{"file":458,"line":468,"context":280},124,{"file":458,"line":330,"context":280},{"file":458,"line":471,"context":280},146,{"file":458,"line":473,"context":280},160,{"file":458,"line":387,"context":280},{"file":458,"line":476,"context":280},182,{"file":458,"line":478,"context":280},196,{"file":458,"line":480,"context":280},210,{"file":458,"line":482,"context":280},224,{"file":458,"line":484,"context":280},235,{"file":458,"line":486,"context":280},252,{"file":458,"line":488,"context":280},263,{"file":458,"line":490,"context":280},274,{"file":458,"line":492,"context":280},285,{"file":458,"line":494,"context":280},296,{"file":458,"line":496,"context":280},307,{"file":458,"line":203,"context":280},{"file":458,"line":499,"context":280},332,{"file":458,"line":501,"context":280},343,{"file":458,"line":503,"context":280},357,{"file":458,"line":505,"context":280},368,{"file":458,"line":507,"context":280},379,{"file":458,"line":509,"context":280},392,{"file":511,"line":512,"context":280},"inc\\settings-cacsp-tab-settings.php",52,{"file":511,"line":428,"context":280},{"file":511,"line":315,"context":280},{"file":511,"line":516,"context":280},94,{"file":511,"line":455,"context":280},{"file":511,"line":322,"context":280},{"file":511,"line":520,"context":280},128,{"file":511,"line":522,"context":280},140,{"file":511,"line":334,"context":280},{"file":511,"line":525,"context":280},164,{"file":511,"line":231,"context":280},{"file":511,"line":528,"context":280},188,{"file":511,"line":530,"context":280},200,{"file":511,"line":532,"context":280},212,{"file":511,"line":534,"context":280},222,{"file":511,"line":536,"context":280},232,{"file":511,"line":538,"context":280},244,{"file":511,"line":540,"context":280},258,{"file":511,"line":542,"context":280},272,{"file":511,"line":492,"context":280},{"file":511,"line":545,"context":280},291,{"file":511,"line":547,"context":280},294,{"file":511,"line":549,"context":280},323,{"file":511,"line":551,"context":280},330,{"file":553,"line":419,"context":280},"inc\\settings-cacsp-tab-texts.php",{"file":553,"line":555,"context":280},14,{"file":553,"line":557,"context":280},24,{"file":553,"line":559,"context":280},27,{"file":553,"line":561,"context":280},60,{"file":553,"line":364,"context":280},{"file":553,"line":564,"context":280},62,{"file":553,"line":300,"context":280},{"file":553,"line":428,"context":280},{"file":553,"line":430,"context":280},{"file":553,"line":432,"context":280},{"file":553,"line":14,"context":280},{"file":553,"line":434,"context":280},{"file":553,"line":366,"context":280},{"file":553,"line":573,"context":280},70,{"file":553,"line":244,"context":280},{"file":553,"line":66,"context":280},{"file":553,"line":303,"context":280},{"file":553,"line":578,"context":280},74,{"file":553,"line":580,"context":280},75,{"file":553,"line":305,"context":280},{"file":553,"line":438,"context":280},{"file":553,"line":440,"context":280},{"file":553,"line":307,"context":280},{"file":553,"line":310,"context":280},{"file":587,"line":588,"context":280},"inc\\settings-cacsp-update-options.php",21,{"file":587,"line":590,"context":280},551,{"file":587,"line":592,"context":280},599,{"file":587,"line":594,"context":280},625,{"file":587,"line":596,"context":280},653,{"file":587,"line":598,"context":280},673,{"file":587,"line":600,"context":280},699,{"file":587,"line":602,"context":280},707,[],[605,620,629,642,1151,1168],{"entryPoint":606,"graph":607,"unsanitizedCount":230,"severity":40},"set_content_security_policy (inc\\set-cacsp.php:5)",{"nodes":608,"edges":618},[609,613],{"id":610,"type":611,"label":612,"file":225,"line":405},"n0","source","$_COOKIE",{"id":614,"type":615,"label":616,"file":225,"line":334,"wp_function":617},"n1","sink","echo() [XSS]","echo",[619],{"from":610,"to":614,"sanitized":248},{"entryPoint":621,"graph":622,"unsanitizedCount":230,"severity":628},"\u003Cset-cacsp> (inc\\set-cacsp.php:0)",{"nodes":623,"edges":626},[624,625],{"id":610,"type":611,"label":612,"file":225,"line":405},{"id":614,"type":615,"label":616,"file":225,"line":334,"wp_function":617},[627],{"from":610,"to":614,"sanitized":248},"low",{"entryPoint":630,"graph":631,"unsanitizedCount":28,"severity":628},"cacsp_consent_init (inc\\settings-cacsp-tab-consent.php:333)",{"nodes":632,"edges":640},[633,636],{"id":610,"type":611,"label":634,"file":272,"line":635},"$_POST",345,{"id":614,"type":615,"label":637,"file":272,"line":638,"wp_function":639},"query() [SQLi]",355,"query",[641],{"from":610,"to":614,"sanitized":249},{"entryPoint":643,"graph":644,"unsanitizedCount":28,"severity":628},"\u003Csettings-cacsp-update-options> (inc\\settings-cacsp-update-options.php:0)",{"nodes":645,"edges":1078},[646,648,651,655,658,662,664,668,670,674,676,680,682,686,688,692,694,698,700,704,706,710,712,716,718,722,724,728,730,734,736,740,742,746,748,752,754,758,760,764,766,770,772,776,778,782,784,788,790,794,796,800,802,806,808,812,814,818,820,824,826,830,832,836,838,842,844,848,850,854,856,860,862,866,868,872,874,878,880,884,886,890,892,896,898,902,904,908,910,914,916,920,922,926,928,932,934,938,940,944,946,950,952,956,958,962,964,968,970,974,976,980,982,986,988,992,994,998,1000,1004,1006,1010,1012,1016,1018,1022,1024,1028,1030,1034,1036,1040,1042,1046,1048,1052,1054,1058,1060,1064,1066,1070,1072,1076],{"id":610,"type":611,"label":647,"file":587,"line":173},"$_POST['cacsp_option_actived']",{"id":614,"type":615,"label":649,"file":587,"line":173,"wp_function":650},"update_option() [Settings Manipulation]","update_option",{"id":652,"type":611,"label":653,"file":587,"line":654},"n2","$_SERVER['HTTP_HOST']",213,{"id":656,"type":615,"label":649,"file":587,"line":657,"wp_function":650},"n3",209,{"id":659,"type":611,"label":660,"file":587,"line":661},"n4","$_POST['cacsp_option_always_scripts']",557,{"id":663,"type":615,"label":649,"file":587,"line":661,"wp_function":650},"n5",{"id":665,"type":611,"label":666,"file":587,"line":667},"n6","$_POST['cacsp_option_always_images']",558,{"id":669,"type":615,"label":649,"file":587,"line":667,"wp_function":650},"n7",{"id":671,"type":611,"label":672,"file":587,"line":673},"n8","$_POST['cacsp_option_always_frames']",559,{"id":675,"type":615,"label":649,"file":587,"line":673,"wp_function":650},"n9",{"id":677,"type":611,"label":678,"file":587,"line":679},"n10","$_POST['cacsp_option_always_forms']",561,{"id":681,"type":615,"label":649,"file":587,"line":679,"wp_function":650},"n11",{"id":683,"type":611,"label":684,"file":587,"line":685},"n12","$_POST['cacsp_option_always_worker']",564,{"id":687,"type":615,"label":649,"file":587,"line":685,"wp_function":650},"n13",{"id":689,"type":611,"label":690,"file":587,"line":691},"n14","$_POST['cacsp_option_statistics_scripts']",567,{"id":693,"type":615,"label":649,"file":587,"line":691,"wp_function":650},"n15",{"id":695,"type":611,"label":696,"file":587,"line":697},"n16","$_POST['cacsp_option_statistics_images']",568,{"id":699,"type":615,"label":649,"file":587,"line":697,"wp_function":650},"n17",{"id":701,"type":611,"label":702,"file":587,"line":703},"n18","$_POST['cacsp_option_statistics_frames']",569,{"id":705,"type":615,"label":649,"file":587,"line":703,"wp_function":650},"n19",{"id":707,"type":611,"label":708,"file":587,"line":709},"n20","$_POST['cacsp_option_statistics_forms']",571,{"id":711,"type":615,"label":649,"file":587,"line":709,"wp_function":650},"n21",{"id":713,"type":611,"label":714,"file":587,"line":715},"n22","$_POST['cacsp_option_statistics_worker']",574,{"id":717,"type":615,"label":649,"file":587,"line":715,"wp_function":650},"n23",{"id":719,"type":611,"label":720,"file":587,"line":721},"n24","$_POST['cacsp_option_experience_scripts']",577,{"id":723,"type":615,"label":649,"file":587,"line":721,"wp_function":650},"n25",{"id":725,"type":611,"label":726,"file":587,"line":727},"n26","$_POST['cacsp_option_experience_images']",578,{"id":729,"type":615,"label":649,"file":587,"line":727,"wp_function":650},"n27",{"id":731,"type":611,"label":732,"file":587,"line":733},"n28","$_POST['cacsp_option_experience_frames']",579,{"id":735,"type":615,"label":649,"file":587,"line":733,"wp_function":650},"n29",{"id":737,"type":611,"label":738,"file":587,"line":739},"n30","$_POST['cacsp_option_experience_forms']",581,{"id":741,"type":615,"label":649,"file":587,"line":739,"wp_function":650},"n31",{"id":743,"type":611,"label":744,"file":587,"line":745},"n32","$_POST['cacsp_option_experience_worker']",584,{"id":747,"type":615,"label":649,"file":587,"line":745,"wp_function":650},"n33",{"id":749,"type":611,"label":750,"file":587,"line":751},"n34","$_POST['cacsp_option_markerting_scripts']",587,{"id":753,"type":615,"label":649,"file":587,"line":751,"wp_function":650},"n35",{"id":755,"type":611,"label":756,"file":587,"line":757},"n36","$_POST['cacsp_option_markerting_images']",588,{"id":759,"type":615,"label":649,"file":587,"line":757,"wp_function":650},"n37",{"id":761,"type":611,"label":762,"file":587,"line":763},"n38","$_POST['cacsp_option_markerting_frames']",589,{"id":765,"type":615,"label":649,"file":587,"line":763,"wp_function":650},"n39",{"id":767,"type":611,"label":768,"file":587,"line":769},"n40","$_POST['cacsp_option_markerting_forms']",591,{"id":771,"type":615,"label":649,"file":587,"line":769,"wp_function":650},"n41",{"id":773,"type":611,"label":774,"file":587,"line":775},"n42","$_POST['cacsp_option_markerting_worker']",594,{"id":777,"type":615,"label":649,"file":587,"line":775,"wp_function":650},"n43",{"id":779,"type":611,"label":780,"file":587,"line":781},"n44","$_POST['cacsp_option_text_header']",603,{"id":783,"type":615,"label":649,"file":587,"line":781,"wp_function":650},"n45",{"id":785,"type":611,"label":786,"file":587,"line":787},"n46","$_POST['cacsp_option_text_info']",604,{"id":789,"type":615,"label":649,"file":587,"line":787,"wp_function":650},"n47",{"id":791,"type":611,"label":792,"file":587,"line":793},"n48","$_POST['cacsp_option_text_link_text']",605,{"id":795,"type":615,"label":649,"file":587,"line":793,"wp_function":650},"n49",{"id":797,"type":611,"label":798,"file":587,"line":799},"n50","$_POST['cacsp_option_text_settings']",606,{"id":801,"type":615,"label":649,"file":587,"line":799,"wp_function":650},"n51",{"id":803,"type":611,"label":804,"file":587,"line":805},"n52","$_POST['cacsp_option_text_always_allow_header']",607,{"id":807,"type":615,"label":649,"file":587,"line":805,"wp_function":650},"n53",{"id":809,"type":611,"label":810,"file":587,"line":811},"n54","$_POST['cacsp_option_text_always_allow_description']",608,{"id":813,"type":615,"label":649,"file":587,"line":811,"wp_function":650},"n55",{"id":815,"type":611,"label":816,"file":587,"line":817},"n56","$_POST['cacsp_option_text_statistics_header']",609,{"id":819,"type":615,"label":649,"file":587,"line":817,"wp_function":650},"n57",{"id":821,"type":611,"label":822,"file":587,"line":823},"n58","$_POST['cacsp_option_text_statistics_description']",610,{"id":825,"type":615,"label":649,"file":587,"line":823,"wp_function":650},"n59",{"id":827,"type":611,"label":828,"file":587,"line":829},"n60","$_POST['cacsp_option_text_experience_header']",611,{"id":831,"type":615,"label":649,"file":587,"line":829,"wp_function":650},"n61",{"id":833,"type":611,"label":834,"file":587,"line":835},"n62","$_POST['cacsp_option_text_experience_description']",612,{"id":837,"type":615,"label":649,"file":587,"line":835,"wp_function":650},"n63",{"id":839,"type":611,"label":840,"file":587,"line":841},"n64","$_POST['cacsp_option_text_marketing_header']",613,{"id":843,"type":615,"label":649,"file":587,"line":841,"wp_function":650},"n65",{"id":845,"type":611,"label":846,"file":587,"line":847},"n66","$_POST['cacsp_option_text_marketing_description']",614,{"id":849,"type":615,"label":649,"file":587,"line":847,"wp_function":650},"n67",{"id":851,"type":611,"label":852,"file":587,"line":853},"n68","$_POST['cacsp_option_settings_button']",615,{"id":855,"type":615,"label":649,"file":587,"line":853,"wp_function":650},"n69",{"id":857,"type":611,"label":858,"file":587,"line":859},"n70","$_POST['cacsp_option_refuse_button']",616,{"id":861,"type":615,"label":649,"file":587,"line":859,"wp_function":650},"n71",{"id":863,"type":611,"label":864,"file":587,"line":865},"n72","$_POST['cacsp_option_accept_all_button']",617,{"id":867,"type":615,"label":649,"file":587,"line":865,"wp_function":650},"n73",{"id":869,"type":611,"label":870,"file":587,"line":871},"n74","$_POST['cacsp_option_save_button']",618,{"id":873,"type":615,"label":649,"file":587,"line":871,"wp_function":650},"n75",{"id":875,"type":611,"label":876,"file":587,"line":877},"n76","$_POST['cacsp_option_text_close']",619,{"id":879,"type":615,"label":649,"file":587,"line":877,"wp_function":650},"n77",{"id":881,"type":611,"label":882,"file":587,"line":883},"n78","$_POST['cacsp_review_settings_description']",620,{"id":885,"type":615,"label":649,"file":587,"line":883,"wp_function":650},"n79",{"id":887,"type":611,"label":888,"file":587,"line":889},"n80","$_POST['cacsp_review_settings_button']",621,{"id":891,"type":615,"label":649,"file":587,"line":889,"wp_function":650},"n81",{"id":893,"type":611,"label":894,"file":587,"line":895},"n82","$_POST['cacsp_not_allowed_description']",622,{"id":897,"type":615,"label":649,"file":587,"line":895,"wp_function":650},"n83",{"id":899,"type":611,"label":900,"file":587,"line":901},"n84","$_POST['cacsp_not_allowed_button']",623,{"id":903,"type":615,"label":649,"file":587,"line":901,"wp_function":650},"n85",{"id":905,"type":611,"label":906,"file":587,"line":907},"n86","$_POST['save_cacsp_settings_texts']",624,{"id":909,"type":615,"label":649,"file":587,"line":907,"wp_function":650},"n87",{"id":911,"type":611,"label":912,"file":587,"line":913},"n88","$_POST['cacsp_option_settings_policy_link']",643,{"id":915,"type":615,"label":649,"file":587,"line":913,"wp_function":650},"n89",{"id":917,"type":611,"label":918,"file":587,"line":919},"n90","$_POST['cacsp_option_settings_policy_link_url']",644,{"id":921,"type":615,"label":649,"file":587,"line":919,"wp_function":650},"n91",{"id":923,"type":611,"label":924,"file":587,"line":925},"n92","$_POST['cacsp_option_settings_expire']",649,{"id":927,"type":615,"label":649,"file":587,"line":925,"wp_function":650},"n93",{"id":929,"type":611,"label":930,"file":587,"line":931},"n94","$_POST['cacsp_option_settings_timeout']",650,{"id":933,"type":615,"label":649,"file":587,"line":931,"wp_function":650},"n95",{"id":935,"type":611,"label":936,"file":587,"line":937},"n96","$_POST['cacsp_option_bypass_ips']",652,{"id":939,"type":615,"label":649,"file":587,"line":937,"wp_function":650},"n97",{"id":941,"type":611,"label":942,"file":587,"line":943},"n98","$_POST['cacsp_option_color_backdrop']",677,{"id":945,"type":615,"label":649,"file":587,"line":943,"wp_function":650},"n99",{"id":947,"type":611,"label":948,"file":587,"line":949},"n100","$_POST['cacsp_option_color_modal_bg']",678,{"id":951,"type":615,"label":649,"file":587,"line":949,"wp_function":650},"n101",{"id":953,"type":611,"label":954,"file":587,"line":955},"n102","$_POST['cacsp_option_color_modal_header_bg']",679,{"id":957,"type":615,"label":649,"file":587,"line":955,"wp_function":650},"n103",{"id":959,"type":611,"label":960,"file":587,"line":961},"n104","$_POST['cacsp_option_color_modal_list_border']",680,{"id":963,"type":615,"label":649,"file":587,"line":961,"wp_function":650},"n105",{"id":965,"type":611,"label":966,"file":587,"line":967},"n106","$_POST['cacsp_option_color_modal_text_color']",681,{"id":969,"type":615,"label":649,"file":587,"line":967,"wp_function":650},"n107",{"id":971,"type":611,"label":972,"file":587,"line":973},"n108","$_POST['cacsp_option_color_modal_header_text_color']",682,{"id":975,"type":615,"label":649,"file":587,"line":973,"wp_function":650},"n109",{"id":977,"type":611,"label":978,"file":587,"line":979},"n110","$_POST['cacsp_option_color_text_on']",683,{"id":981,"type":615,"label":649,"file":587,"line":979,"wp_function":650},"n111",{"id":983,"type":611,"label":984,"file":587,"line":985},"n112","$_POST['cacsp_option_color_disabled']",684,{"id":987,"type":615,"label":649,"file":587,"line":985,"wp_function":650},"n113",{"id":989,"type":611,"label":990,"file":587,"line":991},"n114","$_POST['cacsp_option_color_off']",685,{"id":993,"type":615,"label":649,"file":587,"line":991,"wp_function":650},"n115",{"id":995,"type":611,"label":996,"file":587,"line":997},"n116","$_POST['cacsp_option_color_on']",686,{"id":999,"type":615,"label":649,"file":587,"line":997,"wp_function":650},"n117",{"id":1001,"type":611,"label":1002,"file":587,"line":1003},"n118","$_POST['cacsp_option_color_settings_button']",687,{"id":1005,"type":615,"label":649,"file":587,"line":1003,"wp_function":650},"n119",{"id":1007,"type":611,"label":1008,"file":587,"line":1009},"n120","$_POST['cacsp_option_color_settings_button_border']",688,{"id":1011,"type":615,"label":649,"file":587,"line":1009,"wp_function":650},"n121",{"id":1013,"type":611,"label":1014,"file":587,"line":1015},"n122","$_POST['cacsp_option_color_settings_button_text']",689,{"id":1017,"type":615,"label":649,"file":587,"line":1015,"wp_function":650},"n123",{"id":1019,"type":611,"label":1020,"file":587,"line":1021},"n124","$_POST['cacsp_option_color_refuse_button']",690,{"id":1023,"type":615,"label":649,"file":587,"line":1021,"wp_function":650},"n125",{"id":1025,"type":611,"label":1026,"file":587,"line":1027},"n126","$_POST['cacsp_option_color_refuse_button_border']",691,{"id":1029,"type":615,"label":649,"file":587,"line":1027,"wp_function":650},"n127",{"id":1031,"type":611,"label":1032,"file":587,"line":1033},"n128","$_POST['cacsp_option_color_refuse_button_text']",692,{"id":1035,"type":615,"label":649,"file":587,"line":1033,"wp_function":650},"n129",{"id":1037,"type":611,"label":1038,"file":587,"line":1039},"n130","$_POST['cacsp_option_color_save_button']",693,{"id":1041,"type":615,"label":649,"file":587,"line":1039,"wp_function":650},"n131",{"id":1043,"type":611,"label":1044,"file":587,"line":1045},"n132","$_POST['cacsp_option_color_save_button_border']",694,{"id":1047,"type":615,"label":649,"file":587,"line":1045,"wp_function":650},"n133",{"id":1049,"type":611,"label":1050,"file":587,"line":1051},"n134","$_POST['cacsp_option_color_save_button_text']",695,{"id":1053,"type":615,"label":649,"file":587,"line":1051,"wp_function":650},"n135",{"id":1055,"type":611,"label":1056,"file":587,"line":1057},"n136","$_POST['cacsp_option_color_accept_button']",696,{"id":1059,"type":615,"label":649,"file":587,"line":1057,"wp_function":650},"n137",{"id":1061,"type":611,"label":1062,"file":587,"line":1063},"n138","$_POST['cacsp_option_color_accept_button_border']",697,{"id":1065,"type":615,"label":649,"file":587,"line":1063,"wp_function":650},"n139",{"id":1067,"type":611,"label":1068,"file":587,"line":1069},"n140","$_POST['cacsp_option_color_accept_button_text']",698,{"id":1071,"type":615,"label":649,"file":587,"line":1069,"wp_function":650},"n141",{"id":1073,"type":611,"label":1074,"file":587,"line":1075},"n142","$_POST['cacsp_option_use']",703,{"id":1077,"type":615,"label":649,"file":587,"line":1075,"wp_function":650},"n143",[1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1112,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,1143,1144,1145,1146,1147,1148,1149,1150],{"from":610,"to":614,"sanitized":249},{"from":652,"to":656,"sanitized":249},{"from":659,"to":663,"sanitized":249},{"from":665,"to":669,"sanitized":249},{"from":671,"to":675,"sanitized":249},{"from":677,"to":681,"sanitized":249},{"from":683,"to":687,"sanitized":249},{"from":689,"to":693,"sanitized":249},{"from":695,"to":699,"sanitized":249},{"from":701,"to":705,"sanitized":249},{"from":707,"to":711,"sanitized":249},{"from":713,"to":717,"sanitized":249},{"from":719,"to":723,"sanitized":249},{"from":725,"to":729,"sanitized":249},{"from":731,"to":735,"sanitized":249},{"from":737,"to":741,"sanitized":249},{"from":743,"to":747,"sanitized":249},{"from":749,"to":753,"sanitized":249},{"from":755,"to":759,"sanitized":249},{"from":761,"to":765,"sanitized":249},{"from":767,"to":771,"sanitized":249},{"from":773,"to":777,"sanitized":249},{"from":779,"to":783,"sanitized":249},{"from":785,"to":789,"sanitized":249},{"from":791,"to":795,"sanitized":249},{"from":797,"to":801,"sanitized":249},{"from":803,"to":807,"sanitized":249},{"from":809,"to":813,"sanitized":249},{"from":815,"to":819,"sanitized":249},{"from":821,"to":825,"sanitized":249},{"from":827,"to":831,"sanitized":249},{"from":833,"to":837,"sanitized":249},{"from":839,"to":843,"sanitized":249},{"from":845,"to":849,"sanitized":249},{"from":851,"to":855,"sanitized":249},{"from":857,"to":861,"sanitized":249},{"from":863,"to":867,"sanitized":249},{"from":869,"to":873,"sanitized":249},{"from":875,"to":879,"sanitized":249},{"from":881,"to":885,"sanitized":249},{"from":887,"to":891,"sanitized":249},{"from":893,"to":897,"sanitized":249},{"from":899,"to":903,"sanitized":249},{"from":905,"to":909,"sanitized":249},{"from":911,"to":915,"sanitized":249},{"from":917,"to":921,"sanitized":249},{"from":923,"to":927,"sanitized":249},{"from":929,"to":933,"sanitized":249},{"from":935,"to":939,"sanitized":249},{"from":941,"to":945,"sanitized":249},{"from":947,"to":951,"sanitized":249},{"from":953,"to":957,"sanitized":249},{"from":959,"to":963,"sanitized":249},{"from":965,"to":969,"sanitized":249},{"from":971,"to":975,"sanitized":249},{"from":977,"to":981,"sanitized":249},{"from":983,"to":987,"sanitized":249},{"from":989,"to":993,"sanitized":249},{"from":995,"to":999,"sanitized":249},{"from":1001,"to":1005,"sanitized":249},{"from":1007,"to":1011,"sanitized":249},{"from":1013,"to":1017,"sanitized":249},{"from":1019,"to":1023,"sanitized":249},{"from":1025,"to":1029,"sanitized":249},{"from":1031,"to":1035,"sanitized":249},{"from":1037,"to":1041,"sanitized":249},{"from":1043,"to":1047,"sanitized":249},{"from":1049,"to":1053,"sanitized":249},{"from":1055,"to":1059,"sanitized":249},{"from":1061,"to":1065,"sanitized":249},{"from":1067,"to":1071,"sanitized":249},{"from":1073,"to":1077,"sanitized":249},{"entryPoint":1152,"graph":1153,"unsanitizedCount":230,"severity":1167},"prepare_items (inc\\settings-cacsp-tab-consent.php:73)",{"nodes":1154,"edges":1164},[1155,1157,1160],{"id":610,"type":611,"label":634,"file":272,"line":1156},82,{"id":614,"type":1158,"label":1159,"file":272,"line":1156},"transform","→ get_table_data()",{"id":652,"type":615,"label":1161,"file":272,"line":1162,"wp_function":1163},"get_results() [SQLi]",136,"get_results",[1165,1166],{"from":610,"to":614,"sanitized":248},{"from":614,"to":652,"sanitized":248},"high",{"entryPoint":1169,"graph":1170,"unsanitizedCount":230,"severity":1167},"\u003Csettings-cacsp-tab-consent> (inc\\settings-cacsp-tab-consent.php:0)",{"nodes":1171,"edges":1180},[1172,1174,1175,1176,1177,1178,1179],{"id":610,"type":611,"label":634,"file":272,"line":1173},81,{"id":614,"type":615,"label":1161,"file":272,"line":1162,"wp_function":1163},{"id":652,"type":611,"label":634,"file":272,"line":635},{"id":656,"type":615,"label":637,"file":272,"line":638,"wp_function":639},{"id":659,"type":611,"label":634,"file":272,"line":1156},{"id":663,"type":1158,"label":1159,"file":272,"line":1156},{"id":665,"type":615,"label":1161,"file":272,"line":1162,"wp_function":1163},[1181,1182,1183,1184],{"from":610,"to":614,"sanitized":249},{"from":652,"to":656,"sanitized":249},{"from":659,"to":663,"sanitized":248},{"from":663,"to":665,"sanitized":248},{"summary":1186,"deductions":1187},"The \"cookies-and-content-security-policy\" plugin v2.37 presents a mixed security posture. While it demonstrates some good practices, such as a low number of SQL queries and a high percentage of prepared statements, several concerning aspects warrant attention. The static analysis reveals a notable attack surface with one unprotected REST API route, increasing the risk of unauthorized access or manipulation. Furthermore, a significant portion of output (61%) is not properly escaped, posing a risk of cross-site scripting (XSS) vulnerabilities. The taint analysis highlights two high-severity flows with unsanitized paths, indicating potential for sensitive data exposure or unauthorized actions. The vulnerability history shows two past medium-severity CVEs related to exposure of sensitive information, which, while currently patched, suggests a recurring pattern of vulnerabilities in this area. The plugin's strengths lie in its minimal use of dangerous functions and file operations. However, the combination of an unprotected entry point, potential for XSS, and historical sensitive information exposure issues necessitates caution.",[1188,1190,1192,1194],{"reason":1189,"points":62},"REST API route without permission callbacks",{"reason":1191,"points":47},"High severity taint flows with unsanitized paths",{"reason":1193,"points":354},"Significant percentage of unescaped output",{"reason":1195,"points":62},"Past medium severity CVEs related to data exposure","2026-03-16T17:36:27.060Z",{"wat":1198,"direct":1211},{"assetPaths":1199,"generatorPatterns":1204,"scriptPaths":1205,"versionParams":1206},[1200,1201,1202,1203],"\u002Fwp-content\u002Fplugins\u002Fcookies-and-content-security-policy\u002Fcss\u002Fcookies-and-content-security-policy.min.css","\u002Fwp-content\u002Fplugins\u002Fcookies-and-content-security-policy\u002Fjs\u002Fjs.cookie.min.js","\u002Fwp-content\u002Fplugins\u002Fcookies-and-content-security-policy\u002Fjs\u002Fcookies-and-content-security-policy.min.js","\u002Fwp-content\u002Fplugins\u002Fcookies-and-content-security-policy\u002Fjs\u002Fcookies-and-content-security-policy.js",[],[],[1207,1208,1209,1210],"cookies-and-content-security-policy\u002Fcss\u002Fcookies-and-content-security-policy.min.css?ver=","cookies-and-content-security-policy\u002Fjs\u002Fjs.cookie.min.js?ver=","cookies-and-content-security-policy\u002Fjs\u002Fcookies-and-content-security-policy.min.js?ver=","cookies-and-content-security-policy\u002Fjs\u002Fcookies-and-content-security-policy.js?ver=",{"cssClasses":1212,"htmlComments":1234,"htmlAttributes":1237,"restEndpoints":1265,"jsGlobals":1266,"shortcodeOutput":1269},[1213,1214,1215,1216,1217,1218,1219,1220,1221,1222,1223,1224,1225,1226,1227,1228,1229,1230,1231,1232,1233],"cacsp-review-settings-description","cacsp-review-settings-button","cacsp-not-allowed-description","cacsp-not-allowed-button","cacsp-review-settings-description-content","cacsp-review-settings-button-content","cacsp-not-allowed-description-content","cacsp-not-allowed-button-content","cacsp-modal-content","cacsp-modal-header","cacsp-modal-close","cacsp-modal-title","cacsp-modal-list","cacsp-modal-list-item","cacsp-modal-list-item-text","cacsp-modal-footer","cacsp-modal-button","cacsp-modal-button-save","cacsp-modal-button-refuse","cacsp-modal-button-accept","cacsp-settings-button",[1235,1236],"\u003C!-- Start Content Security Policy and Cookie Consent by Follow me Darling -->","\u003C!-- End Content Security Policy and Cookie Consent by Follow me Darling -->",[1238,1239,1240,1241,1242,1243,1244,1245,1246,1247,1248,1249,1250,1251,1252,1253,1254,1255,1256,1257,1258,1259,1260,1261,1262,1263,1264],"data-cacsp-cookie-categories","data-cacsp-cookie-block-message","data-cacsp-cookie-block-button-text","data-cacsp-cookie-block-button-link","data-cacsp-cookie-block-button-link-target","data-cacsp-cookie-block-button-settings-text","data-cacsp-cookie-block-button-settings-link","data-cacsp-cookie-block-button-settings-link-target","data-cacsp-cookie-block-button-accept-text","data-cacsp-cookie-block-button-refuse-text","data-cacsp-cookie-block-button-accept-link","data-cacsp-cookie-block-button-accept-link-target","data-cacsp-cookie-block-button-refuse-link","data-cacsp-cookie-block-button-refuse-link-target","data-cacsp-cookie-block-consent-text","data-cacsp-cookie-block-consent-button-text","data-cacsp-cookie-block-consent-button-link","data-cacsp-cookie-block-consent-button-link-target","data-cacsp-cookie-block-consent-button-settings-text","data-cacsp-cookie-block-consent-button-settings-link","data-cacsp-cookie-block-consent-button-settings-link-target","data-cacsp-cookie-block-consent-button-accept-text","data-cacsp-cookie-block-consent-button-refuse-text","data-cacsp-cookie-block-consent-button-accept-link","data-cacsp-cookie-block-consent-button-accept-link-target","data-cacsp-cookie-block-consent-button-refuse-link","data-cacsp-cookie-block-consent-button-refuse-link-target",[],[1267,1268],"cacsp_ajax_object","cacspMessages",[]]