CVE-2026-82184

The WPLP Cookie Consent WordPress plugin before version 4.4.2 lacks authorization and CSRF checks when storing visitor consent state. The affected code executes on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide IAB TCF consent option with arbitrary data. Th...