CVE-2026-75865 | wplegalpages WPLP Cookie Consent Plugin up to 4.4.1 on WordPress File Upload/REST Endpoint saas_upload_logo unrestricted upload

September 1, 2026 Yanac

A vulnerability, which was classified as critical, has been found in wplegalpages WPLP Cookie Consent Plugin up to 4.4.1 on WordPress. The impacted element is the function saas_upload_logo of the component File Upload/REST Endpoint. Performing a manipulation results in unrestricted upload.

This vulnerability was named CVE-2026-75865. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More