CVE-2026-9635 | MymeShop WP Shortcode Plugin up to 1.4.17 on WordPress mts_tabs Title cross site scripting

July 23, 2026 Yanac

A vulnerability has been found in MymeShop WP Shortcode Plugin up to 1.4.17 on WordPress and classified as problematic. This affects the function mts_tabs of the component Shortcode Handler. This manipulation of the argument Title causes cross site scripting.

This vulnerability appears as CVE-2026-9635. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More