CVE-2025-63019 - WordPress Cookies and Content Security Policy plugin <= 2.34 - Sensitive Data Exposure vulnerability

Back Back to CVE browser

MEDIUM

WordPress Cookies and Content Security Policy plugin <= 2.34 - Sensitive Data Exposure vulnerability

Published Jan 22, 2026

5.3

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Johan Jonk Stenström Cookies and Content Security Policy cookies-and-content-security-policy allows Retrieve Embedded Sensitive Data.This issue affects Cookies and Content Security Policy: from n/a through <= 2.34.

Affected products

Vendor Johan Jonk Stenström Product Cookies and Content Security Policy Default
unaffected
Affected
- ≥ 0, ≤ 2.34

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Johan Jonk Stenström	Cookies and Content Security Policy	unaffected	Affected ≥ 0, ≤ 2.34

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-201

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4052		Advisory
https://patchstack.com/database/Wordpress/Plugin/cookies-and-content-security-policy/vulnerability/wordpress-cookies-and-content-security-policy-plugin-2-34-sensitive-data-exposure-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Jan 22, 2026

Updated Apr 28, 2026

Reserved Oct 24, 2025

Link CVE-2025-63019

CISA Vulnrichment

Updated Jan 26, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-63019

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published Jan 22, 2026

Updated Apr 28, 2026

Link EUVD-2026-4052

GitHub

No data