5.3
Moyenne
CVE-2026-82184 The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing…
Description
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WPLP Cookie Consent 3.5 | 3.5.0 → < 4.4.2 | 4.4.2 |
Autres CVE de WPLP Cookie Consent
Les 7 CVE de WPLP Cookie Consent →
CVE-2026-85130
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for…
8.8
Élevée
CVE-2026-85131
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk…
6.5
Moyenne
CVE-2026-85133
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its…
5.4
Moyenne
CVE-2026-85132
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its…
4.3
Moyenne