← Database

CVE-2026-82186

MEDIUM CVSS: 4.1 Published: 2026-09-04 Modified: 2026-09-08

Description

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privileges to perform SQL injection attacks.

Affected Platforms

Unknown

Weakness Type

CWE-89

References