CVE-2026-82186

LOWCVSS 4.1 · MEDIUM

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privileges to perform SQL injection attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post
  • pdnuclei-bot@pdnuclei_bot

    🚨 CVE-2026-82186 - medium 🚨 WordPress WPLP Cookie Consent < 4.4.2 - SQL Injection > The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pa... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-82186 @pdnuclei #NucleiTemplates #cve

    00000165
    1.4K followersView on X

Explore more