PT-2026-81266
CVE-2026-17587
·
تاريخ النشر
2026-08-24
·
تاريخ التحديث
2026-09-28
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
My Agile Privacy® – CMP, Cookie Consent & Privacy Tools versions prior to 3.3.7
Description
An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attackers to modify plugin settings stored in the settings key, specifically the
missing cookie shield, cookie shield running, cmode v2 js on error, cmode v2 js error code, and cmode v2 js error motivation variables.Recommendations
Update My Agile Privacy® – CMP, Cookie Consent & Privacy Tools to version 3.3.7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾