Vendor
WP Legal Pages
25 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8CVE-2026-75865 Public exploit
WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint
The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saas_upload_logo() function combined with an authorization…