What is GHSA-rmf2-688x-24h9?

GHSA-rmf2-688x-24h9 is a security advisory published by GitHub Security Advisories with Medium severity. The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF...

Which CVE IDs does GHSA-rmf2-688x-24h9 cover?

GHSA-rmf2-688x-24h9 covers the following CVE IDs: CVE-2026-82184. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rmf2-688x-24h9?

GHSA-rmf2-688x-24h9 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-rmf2-688x-24h9MediumCVSS 5.3

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-82184 →

📋 Description

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82184
https://wpscan.com/vulnerability/54f2da44-84c2-4c56-88f3-615ae4054ecb
https://github.com/advisories/GHSA-rmf2-688x-24h9