CVE-2026-17587: Formulaagile My Agile Privacy – Cmp, Cookie Consent & Privacy Tools

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify plugin settings including missing_cookie_shield, cookie_shield_running, cmode_v2_js_on_error, cmode_v2_js_error_code, and cmode_v2_js_error_motivation stored in the plugin's settings key.

Affected products

• Formulaagile My Agile Privacy – Cmp, Cookie Consent & Privacy Tools: up to and including 3.3.6

Published 2026-08-25. Last modified 2026-09-28.