Wplp Cookie Consent (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-17. Vendor: Unknown.

CVEs of Wplp Cookie Consent

• CVE-2026-85130 - CVSS 8.8 (high), 2026-09-17: The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later…
• CVE-2026-85131 - CVSS 6.5 (medium), 2026-09-16: The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens,…
• CVE-2026-85133 - CVSS 5.4 (medium), 2026-09-09: The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any…
• CVE-2026-85132 - CVSS 4.3 (medium), 2026-09-09: The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any…
• CVE-2026-82185 - CVSS 4.3 (medium), 2026-09-09: The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated…
• CVE-2026-82184 - CVSS 5.3 (medium), 2026-09-09: The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that…
• CVE-2026-82186 - CVSS 4.1 (medium), 2026-09-04: The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with…