Question 1

What exactly is the vulnerability in Complianz?

Accepted Answer

What exactly is the vulnerability in Complianz?

The vulnerability is a stored cross-site scripting (XSS) issue that allows authenticated users with WordPress admin access to inject malicious JavaScript code into webpages. This exploit works by allowing unsafe input that contains scripts to be saved and later served to users without being properly sanitized.

Successful attacks don't require any access beyond admin privileges in WordPress. The injected scripts are stored in the database and will execute any time a user views a compromised page, making it possible to steal session data, take over accounts, or deliver malware.

Question 2

What WordPress sites are affected or at risk?

Accepted Answer

What WordPress sites are affected or at risk?

Any WordPress site running the Complianz GDPR/CCPA cookie consent plugin on versions 6.5.5 or lower is affected. This is a very popular plugin with over 800,000 active installs, so a significant number of sites are exposed.

What specifically is the risk if my site is vulnerable?

If your Complianz plugin is vulnerable, any user with admin access could add malicious scripts to your database that give them significant control over your site, users, and data. Potential impacts include login credential theft, site defacements, data exfiltration, malware delivery, blacklisting by search engines, and more depending on the attacker's goals.

Question 3

How can I tell if malicious scripts were injected into my site?

Accepted Answer

How can I tell if malicious scripts were injected into my site?

Carefully review all webpages on your WordPress site for any unauthorized javascript or iframe tags, especially in locations you wouldn't expect legitimate code. Strange looking code snippets that seem obscure or encoded may indicate an attack. You can also install a security plugin to scan for injections.

Question 4

What specifically is the risk if my site is vulnerable?

Accepted Answer

What specifically is the risk if my site is vulnerable?

If your Complianz plugin is vulnerable, any user with admin access could add malicious scripts to your database that give them significant control over your site, users, and data. Potential impacts include login credential theft, site defacements, data exfiltration, malware delivery, blacklisting by search engines, and more depending on the attacker's goals.

Question 5

I use Complianz for cookie consent. What should I do now?

Accepted Answer

I use Complianz for cookie consent. What should I do now?

All site owners using affected plugin versions should update to 6.5.6 or newer immediately. You can do this by logging into your WordPress dashboard and accessing the plugins page to trigger an update. Be sure to check for unauthorized scripts afterwards.

Question 6

Is switching cookie consent plugins an option?

Accepted Answer

Is switching cookie consent plugins an option?

Yes, switching to an alternate plugin like Cookie Notice or Cookiebot can provide protection by removing the vulnerable code base. Before switching, be sure to thoroughly check your current site for any indicators of compromise from past attacks.

Question 7

How did this vulnerability happen in the first place?

Accepted Answer

How did this vulnerability happen in the first place?

Insufficient validation and escaping of user input in the plugin settings allowed scripts to be stored in the database and rendered on front-facing pages. Input that contains HTML and JavaScript should always be sanitized before storage and output to prevent XSS attacks.

Question 8

Has this vulnerability in Complianz been fixed?

Accepted Answer

Has this vulnerability in Complianz been fixed?

Yes, Complianz has patched this vulnerability in version 6.5.6. All sites should update as soon as possible to ensure they have the fix. Automated background updates can ensure you receive important security patches promptly when issues emerge.

Question 9

Is this the first vulnerability found in Complianz?

Accepted Answer

Is this the first vulnerability found in Complianz?

Unfortunately no - while the software authors have been relatively quick to patch issues, this is one of fifteen vulnerabilities identified in the plugin over the past year. The frequency of problems being reported likely warrants caution.

Question 10

Who should I contact if I need help updating or securing WordPress?

Accepted Answer

Who should I contact if I need help updating or securing WordPress?

If you require any assistance applying this update to Complianz or securing your WordPress site, don't hesitate to reach out to [support email]. We have WordPress experts available to scan for malware or vulnerabilities, make recommendations specific to your setup, perform updates, optimize performance, and help improve security.

Posts Tagged ‘Complianz’

Complianz Vulnerability – Authenticated(Administrator+) Stored Cross-site Scripting via settings – CVE-2023-6498 | WordPress Plugin Vulnerability Report

Recent Blog Posts

LiteSpeed Cache Vulnerability – Unauthenticated Sensitive Information Exposure via Log Files – CVE-2024-44000 | WordPress Plugin Vulnerability Report

Elementor Addon Elements Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Parameters – CVE-2024-4401, CVE-2024-7122 | WordPress Plugin Vulnerability Report

The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Vulnerability – Authenticated (Contributor+) Information Disclosure – CVE-2024-7418 | WordPress Plugin Vulnerability Report

Additional Resources

About Your WP Guy