TI-2025-03443 CVE-2025-3897 · GHSA-rjp8-g2cv-jvmvEUCookieLaw <= 2.7.2 - Unauthenticated Arbitrary File ReadPriority LOW 28The EUCookieLaw plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.7.2 via the 'file_get_contents' function.CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00765 · Published 2025-05-09 · No fix listed CWE-22