GCVE - cpe:2.3:a:unknown:wplp_cookie_consent:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wplp_cookie_consent:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Wplp Cookie Consent (`a4251030-282d-5d66-b7d5-0e29e241cffe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-85133`	vulnerable	2026-09-16 04:33:08.124319	WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authenticated user, such as a subscriber, to read and destroy scan data belonging to the administrator and to overwrite the WPLP Cookie Consent WordPress plugin before 4.4.2's stored configuration. Published: 2026-09-09T06:00:09.097Z Updated: 2026-09-09T15:29:58.090Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/3c43baf6-e2b1-4d6a-ab3f-b8be26f61c9f/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-85132`	vulnerable	2026-09-16 04:33:08.003167	WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule the administrator configured. Published: 2026-09-09T06:00:08.871Z Updated: 2026-09-09T15:29:47.746Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/412f604b-ee33-42b6-8a39-00f7564d4e2b/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-82184`	vulnerable	2026-09-16 04:32:53.829435	WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data. Published: 2026-09-09T06:00:06.932Z Updated: 2026-09-09T15:38:24.007Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/54f2da44-84c2-4c56-88f3-615ae4054ecb/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-82185`	vulnerable	2026-09-16 04:32:53.812647	WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown to every visitor and to irreversibly reset the stored A/B test results. Published: 2026-09-09T06:00:07.110Z Updated: 2026-09-09T15:38:09.633Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/a1ddc435-b25f-4e6b-bc7e-55a73d4f60c8/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.