A vulnerability classified as problematic has been found in Bulma Shortcodes Plugin up to 1.0 on WordPress. The affected element is the function Type of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-11802. Remote exploitation of the attack is possible. No exploit is available.