https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:18:58.256034+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82184 fkie_cve-2026-82184 2026-09-28T19:18:58.734809+00:00

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data.

 https://vulnerability.circl.lu/vuln/ghsa-rmf2-688x-24h9 GHSA-rmf2-688x-24h9 2026-09-28T19:18:58.734961+00:00

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data.