CVE-2026-17149 | saadiqbal myCred Plugin up to 3.2.4 on WordPress Shortcode wrapper cross site scripting

September 9, 2026 Yanac

A vulnerability has been found in saadiqbal myCred Plugin up to 3.2.4 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. The manipulation of the argument wrapper leads to cross site scripting.

This vulnerability is documented as CVE-2026-17149. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More