Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-82970 EUVD-2026-68575GHSA-835r-3gvv-r7jg

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability

Published Aug 31, 2026 · Updated Aug 31, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files.

This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.4.1.

Affected products

VendorProductAffectedFixed
WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent ≤ 4.4.1 —

References