Authorization Bypass in My Agile Privacy Plugin for WordPress

CVE-2026-17587

What is CVE-2026-17587?

The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress has a vulnerability that allows unauthorized users to modify critical plugin settings. This flaw originates from the plugin's failure to properly verify user authorization, enabling unauthenticated attackers to change settings related to cookie management. All versions up to and including 3.3.6 are affected, making it crucial for users to assess their security measures and update the plugin to its latest version to mitigate potential risks.

References