Authenticated Privilege Escalation in WPLP Cookie Consent WordPress Plugin

Executive Summary

The WPLP Cookie Consent WordPress plugin before version 4.4.2 has a vulnerability where it does not perform nonce or capability checks on certain AJAX actions. This allows any authenticated user, including subscribers, to read and delete administrator scan data and modify the plugin's stored configuration.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the WPLP Cookie Consent plugin in your WordPress admin panel. If it is below 4.4.2, the system is vulnerable. Look for unauthorized changes in plugin configuration or scan data deletion.

Useful 0 Not Useful 0

Impact Analysis

An attacker with subscriber-level access or higher could exploit this to delete important scan data, view sensitive information, or change the plugin's settings without authorization. This could disrupt cookie consent functionality and potentially expose user data.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access or deletion of user data, which may violate GDPR's data integrity and confidentiality requirements. For HIPAA, it risks exposing protected health information if scan data includes such details.

Useful 0 Not Useful 0

Mitigation Strategies

Update the WPLP Cookie Consent plugin to version 4.4.2 or later immediately. Review plugin settings and scan data for any unauthorized modifications or deletions.

Useful 0 Not Useful 0