A vulnerability, which was classified as problematic, has been found in Cookie Notice & Compliance for GDPR CCPA Plugin up to 2.5.8 on WordPress. Affected by this issue is the function
cookies_accepted of the component Shortcode Handler. The manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-11186. The attack is possible to be carried out remotely. No exploit exists.
