The WP Cookies Alert plugin by aleapp, versions up to 1.1.1, contains a CSRF vulnerability that could allow an attacker to induce an authenticated user to execute unintended actions. The vulnerability is network exploitable without privileges and requires user interaction. It impacts confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector (C:L/I:L/A:L). No vendor advisory or patch information is currently available.

Successful exploitation of this CSRF vulnerability could lead to limited confidentiality, integrity, and availability impacts on the affected WordPress site using the WP Cookies Alert plugin. Since the attacker must trick a user into interaction, the risk depends on user behavior. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the WP Cookies Alert plugin if feasible, or applying any available temporary mitigations recommended by the vendor. Monitor vendor channels for updates.