CVE-2026-14475 | wplegalpages Cookie Banner for GDPR / CCPA Plugin up to 4.3.6 on WordPress Cookie Consent scan_id sql injection

July 10, 2026 Yanac

A vulnerability labeled as problematic has been found in wplegalpages Cookie Banner for GDPR and CCPA Plugin up to 4.3.6 on WordPress. The impacted element is an unknown function of the component Cookie Consent Handler. Such manipulation of the argument scan_id leads to sql injection.

This vulnerability is referenced as CVE-2026-14475. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More