CVE-2026-82185

Name of the Vulnerable Software and Affected Versions WPLP Cookie Consent versions prior to 4.4.2

Description Authenticated users, including those with subscriber-level access, can perform unauthorized actions due to missing capability or nonce checks on certain A/B testing actions. This flaw allows an attacker to overwrite the cookie banner configuration displayed to all visitors and irreversibly reset stored A/B test results. The issue stems from a missing capability check within a function.

Recommendations Update WPLP Cookie Consent to version 4.4.2 or later.