CVE-2026-107631

Received Received - Intake

Stored XSS in Complianz Record of Consent WordPress Plugin

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Wordfence

Description

The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'uid' parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is possible because the enforcing nonce is emitted via wp_localize_script on wp_enqueue_scripts and is therefore readable by any unauthenticated frontend visitor, and no capability or role check gates the write path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-107631

EUVD

EUVD-2026-100908

Affected Vendors & Products

Vendor	Product	Version / Range
davidevalerio	Record	of Consent Extension for Complianz 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

The Record of Consent Extension for Complianz WordPress plugin has a stored Cross-Site Scripting (XSS) vulnerability in versions up to 2.5. The flaw exists in the 'uid' parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject malicious scripts into pages, which execute when users access those pages. The vulnerability is possible because the enforcing nonce is exposed via wp_localize_script and is readable by any unauthenticated frontend visitor, and there are no capability or role checks for the write path.

Detection Guidance

Check for the presence of the Record of Consent Extension for Complianz plugin in your WordPress installation. Inspect the 'uid' parameter in plugin outputs for suspicious scripts or unexpected inputs. Review server logs for unauthorized script injections in pages generated by the plugin.

Impact Analysis

This vulnerability allows attackers to inject arbitrary web scripts into pages. When users visit these pages, the injected scripts can execute, potentially stealing user sessions, redirecting to malicious sites, or performing actions on behalf of the user. Since the plugin handles consent records for privacy compliance, attackers could manipulate or steal consent data, undermining the integrity of consent records and exposing sensitive user information.

Compliance Impact

This vulnerability can compromise compliance with GDPR by allowing unauthorized script injection into consent records, potentially altering or stealing consent data. Since the plugin is designed to help maintain GDPR compliance, the XSS flaw undermines its purpose and could lead to non-compliance with GDPR Article 7 (conditions for consent). The plugin's integrity checks and anonymization features may be bypassed, risking data integrity and user privacy. HIPAA compliance could also be affected if the plugin is used in healthcare contexts, as it may expose protected health information.

Mitigation Strategies

Update the Record of Consent Extension for Complianz plugin to the latest version if available. Disable the plugin temporarily if an update is not immediately available. Implement additional input sanitization and output escaping measures in your WordPress environment.

Hi! I’m here to help you understand CVE-2026-107631. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70