CVE-2026-120854: WordPress iubenda plugin <= 3.13.6 - Denial of Service Attack vulnerability
Allocation of Resources Without Limits or Throttling vulnerability in iubenda iubenda iubenda-cookie-law-solution allows HTTP DoS.This issue affects iubenda: from n/a through 3.13.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iubenda/iubenda-cookie-law-solutionto a version that resolves this vulnerability.Fixed in 3.13.7
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is remotely exploitable over the network and requires no privileges or user interaction. An unauthenticated attacker can target an affected installation.
What is the practical impact?
Successful exploitation can cause a denial of service by exhausting or improperly consuming resources. The supplied impact data indicates availability impact only; no confidentiality or integrity impact is specified.
Which plugin versions are affected?
The affected range is reported as iubenda versions through 3.13.6. No fixed version is provided in the available data.