Vulnerability in Cookie Consent

CVE-2026-15388

The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall back to an authentication-only gate, allowing any authenticate…

Affected products

  • Unknown Cookie Consent — versions 0

References