What is GHSA-qcjj-jxmw-wxpg?

GHSA-qcjj-jxmw-wxpg is a security advisory published by GitHub Security Advisories with Medium severity. The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability...

Which CVE IDs does GHSA-qcjj-jxmw-wxpg cover?

GHSA-qcjj-jxmw-wxpg covers the following CVE IDs: CVE-2026-85133. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qcjj-jxmw-wxpg?

GHSA-qcjj-jxmw-wxpg has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-qcjj-jxmw-wxpgMediumCVSS 5.4

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-85133 →

📋 Description

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authenticated user, such as a subscriber, to read and destroy scan data belonging to the administrator and to overwrite the WPLP Cookie Consent WordPress plugin before 4.4.2's stored configuration.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-85133
https://wpscan.com/vulnerability/3c43baf6-e2b1-4d6a-ab3f-b8be26f61c9f
https://github.com/advisories/GHSA-qcjj-jxmw-wxpg