Resource Allocation Flaw in iubenda Cookie Law Solution Affects Web Security
CVE-2026-120854

7.5HIGH

Key Information:

Vendor

WordPress
Status
Iubenda
Vendor
CVE Published:
9 November 2026

What is CVE-2026-120854?

A vulnerability in the iubenda Cookie Law Solution allows for Denial of Service (DoS) attacks through improper resource allocation. This can lead to unintentional server overloads and may significantly impact website accessibility, affecting users and business operations. It is essential to address this vulnerability to ensure the integrity and continuity of services.

Affected Version(s)

iubenda 0 <= 3.13.6

References

https://patchstack.com/database/wordpress/plugin/iubenda-...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dthangws | Patchstack Bug Bounty Program
.