CVE-2026-82186

Name of the Vulnerable Software and Affected Versions WPLP Cookie Consent versions prior to 4.4.2

Description Insufficient validation and escaping of a user-supplied pagination parameter allows authenticated users with administrator privileges to perform SQL injection attacks. This occurs because the parameter is used in a SQL query without sufficient preparation, enabling attackers to append additional queries to extract sensitive information from the database.

Recommendations Update to version 4.4.2 or later.