{"vulnerability": "cve-2026-75865", "sightings": [{"uuid": "24a51c75-4fa2-4371-ba9c-a50d7c6ba730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mugjttrvhg2u", "content": "\ud83d\udd34 CVE-2026-75865 - Critical (9.8)\n\nThe WPLP Cookie Consent \u2013 Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75865/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T03:59:58.106665Z"}, {"uuid": "741e20fe-142e-4642-ac7d-b9e9b73a612c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mugk44tbld2w", "content": "Critical Cookie Banner Flaw, Because Even Consent Pages Bleed Out\nPANIC 78% | Lag 0.0h | A critical CVE-2026-75865 vulnerability has been reported in the WPLP Cookie Consent plugin, with a \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-01T04:04:34.177321Z"}, {"uuid": "7ceabdcb-4bda-488b-ba2a-e4d367237398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mugkarjvjb2b", "content": "\ud83d\udea8 CVE-2026-75865 \u2014 CVSS 9.8 CRITICAL\n\nThe WPLP Cookie Consent \u2013 Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin fo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75865\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T04:07:10.350623Z"}, {"uuid": "fd11fc0d-e510-4dad-b0e5-585ce08b3754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mugkfysm2k2e", "content": "CVE-2026-75865 - wplp cookie consent \u2013 cookie banner & consent management for gdpr, ccpa & google consent mode\nThe cookie consent plugin for WordPress can be tricked into accepting any file type, and the upload\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wplegalpages #CVE #infosec", "creation_timestamp": "2026-09-01T04:10:05.674323Z"}, {"uuid": "36c05908-7d51-46cd-ac8c-6490cc18f81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://t.me/GithubRedTeam/101195", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-75865\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 07:53:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload -> RCE in WPLP Cookie Consent (gdpr-cookie-consent) <= 4.4.1 - technical write-up and PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T09:00:05.216859Z"}, {"uuid": "7bec55c9-3fe3-4985-a31a-c4c7e446b1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "Telegram/dpgHxQKToET6DYqvRQ6MEfWshfz0qOTKTnxbqKSRBdQu0rw", "content": "", "creation_timestamp": "2026-09-05T22:00:05.857496Z"}, {"uuid": "83ae6f62-dde5-4358-923a-3e97b3d7903f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "Telegram/dpgHxQKToET6DYqvRQ6MEfWshfz0qOTKTnxbqKSRBdQu0rw", "content": "", "creation_timestamp": "2026-09-06T00:00:15.853821Z"}, {"uuid": "a3452a33-a545-44c7-8faf-3bc2f8c36983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101195", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-75865\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 07:53:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload -> RCE in WPLP Cookie Consent (gdpr-cookie-consent) <= 4.4.1 - technical write-up and PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:51.331609Z"}]}