High · 7.5 CVE-2026-120854 EUVD-2026-120035GHSA-5rvp-46vc-mcfc

WordPress iubenda plugin <= 3.13.6 - Denial of Service Attack vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Allocation of Resources Without Limits or Throttling vulnerability in iubenda iubenda iubenda-cookie-law-solution allows HTTP DoS.This issue affects iubenda: from n/a through 3.13.6.

Affected products

Vendor	Product	Affected	Fixed
iubenda	iubenda	≤ 3.13.6	—

References

https://patchstack.com/database/wordpress/plugin/iubenda-cookie-law-solution/vulnerability/wordpress-iubenda-plugin-3-13-6-denial-of-service-attack-vulnerability?_s_id=cve vdb-entry