VULNERABILITY INTELLIGENCE
CVE-2026-16613
CVSS score4.3 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-08-05
Last modified2026-08-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Description
The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable without authentication and performs no request-origin check, allowing an attacker to log any user out and delete the site's cookies by luring them to a crafted link.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)