CVE-2026-16613 — GDPR Cookie Compliance < 5.1.0 - Cookie Deletion and Forced Logout via CSRF

CVE-2026-16613

GDPR Cookie Compliance < 5.1.0 - Cookie Deletion and Forced Logout via CSRF PUBLISHED

Description (CNA)

The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable without authentication and performs no request-origin check, allowing an attacker to log any user out and delete the site's cookies by luring them to a crafted link.

Affected (CNA)

Vendor / product	Versions
Unknown / GDPR Cookie Compliance	affected 0 before 5.1.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d9511e8a-be67-4c39-b947-7931b5569ffb/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.