CVE-2025-51529

5.3 mediumEPSS 0.4%

Medium (5.3) in followmedarling cookies and content security policy. EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service (database server resource exhaustion) via unlimited database write operations to the wp_ajax_nopriv_cacsp_insert_consent_data endpoint.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-08-19
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

followmedarling:cookies_and_content_security_policy

References

https://gist.github.com/piotrmaciejbednarski/f738145c0ab24a110649dc16907e395b
https://github.com/piotrmaciejbednarski/CVE-2025-51529

Check your stack JSON