Is CVE-2026-82970 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82970?

CVE-2026-82970 has a CVSS v3 severity of CRITICAL (10).

Back

CVE-2026-82970

Description

Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files. This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.4.1.