A vulnerability was found in myCred Plugin up to 2.9.7.3 on WordPress. It has been rated as problematic. The affected element is the function
mycred_load_coupon of the component Shortcode Handler. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2026-0550. It is possible to initiate the attack remotely. There is no exploit available.
