A vulnerability classified as problematic has been found in Extended Random Number Generator Plugin up to 1.1 on WordPress. Affected by this vulnerability is an unknown functionality of the component Setting Handler. This manipulation causes cross site scripting.
This vulnerability is registered as CVE-2026-0681. Remote exploitation of the attack is possible. No exploit is available.