CVE-2026-82184
WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data.
| Vendor | unknown |
| Product | wplp cookie consent |
| Published | Sep 9, 2026 |
| Last Updated | Sep 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wplp cookie consent
Be the first to know when new medium vulnerabilities affecting unknown wplp cookie consent are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WPLP Cookie Consent
3.5.0 < 4.4.2
References
Credits
Alex Spataru WPScan