CVE-2026-82185
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown to every visitor and to irreversibly reset the stored A/B test results.
| Vendor | unknown |
| Product | wplp cookie consent |
| Published | Sep 9, 2026 |
| Last Updated | Sep 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wplp cookie consent
Be the first to know when new medium vulnerabilities affecting unknown wplp cookie consent are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WPLP Cookie Consent
3.6.5 < 4.4.2
References
Credits
RIA Labs WPScan