What’s Vulnerable › Products

WPLP Cookie Consent vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your WPLP Cookie Consent version is affected

Latest WPLP Cookie Consent vulnerabilities

• CVE-2026-85130 — WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs (CVSS 8.8)
• CVE-2026-85131 — WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRF (CVSS 6.5)
• CVE-2026-85133 — WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions (CVSS 5.4)
• CVE-2026-85132 — WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan (CVSS 4.3)
• CVE-2026-82185 — WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset (CVSS 4.3)
• CVE-2026-82184 — WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update (CVSS 5.3)
• CVE-2026-82186 — WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter (CVSS 4.1)