CVE-2026-82186
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privileges to perform SQL injection attacks.
- Published Sep 4, 2026
- CVSS 4.1 medium
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available