CVE-2026-16613

A vulnerability in the GDPR Cookie Compliance WordPress plugin prior to version 5.1.0 allowed unauthorized access to certain functionality, enabling an attacker to induce cookie expiration for any visitor through a specially designed URL. This exploit bypassed authentication requirements and lacked origin verification, effectively allowing malicious activity such as user logout and site-wide cookie deletion.

Based on public CVE data (MITRE/NVD).