WC
Product
WPLP Cookie Consent
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add WPLP Cookie Consent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85130 | 8.8 | Sep 17 | WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs Affected: before 4.4.4 |
| CVE-2026-85131 | 6.5 | Sep 16 | WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF Affected: before 4.4.4 |
| CVE-2026-85133 | 5.4 | Sep 9 | WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions Affected: before 4.4.2 |
| CVE-2026-82184 | 5.3 | Sep 9 | WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update Affected: 3.5.0 before 4.4.2 |
| CVE-2026-85132 | 4.3 | Sep 9 | WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan Affected: 4.0.2 before 4.4.2 |
| CVE-2026-82185 | 4.3 | Sep 9 | WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset Affected: 3.6.5 before 4.4.2 |
| CVE-2026-82186 | 4.1 | Sep 4 | WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter Affected: 3.0.0 before 4.4.2 |
Showing 7