What is GHSA-px42-w9w7-vmf7?

GHSA-px42-w9w7-vmf7 is a security advisory published by GitHub Security Advisories with Medium severity. The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks...

Which CVE IDs does GHSA-px42-w9w7-vmf7 cover?

GHSA-px42-w9w7-vmf7 covers the following CVE IDs: CVE-2026-85131. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-px42-w9w7-vmf7?

GHSA-px42-w9w7-vmf7 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-px42-w9w7-vmf7MediumCVSS 6.5

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-85131 →

📋 Description

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts and pages via a crafted request.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-85131
https://wpscan.com/vulnerability/5a94c9c8-5b30-4735-be6b-ced53ff587bc
https://github.com/advisories/GHSA-px42-w9w7-vmf7