CVE-2026-17587

Name of the Vulnerable Software and Affected Versions My Agile Privacy® – CMP, Cookie Consent & Privacy Tools versions prior to 3.3.7

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attackers to modify plugin settings stored in the settings key, specifically the missing cookie shield, cookie shield running, cmode v2 js on error, cmode v2 js error code, and cmode v2 js error motivation variables.

Recommendations Update My Agile Privacy® – CMP, Cookie Consent & Privacy Tools to version 3.3.7 or later.