CVE-2026-82186
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
CVSS Score
4.1
EPSS Score
0.0%
EPSS Percentile
0th
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privileges to perform SQL injection attacks.
| Vendor | unknown |
| Product | wplp cookie consent |
| Published | Sep 4, 2026 |
| Last Updated | Sep 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wplp cookie consent
Be the first to know when new medium vulnerabilities affecting unknown wplp cookie consent are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WPLP Cookie Consent
3.0.0 < 4.4.2
References
Credits
cyberkareem WPScan