Every CVE whose affected-product data names Surbma Gdpr Proof Cookie Consent & Notice Bar, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.