A vulnerability was found in AndonDesign UDesign Plugin up to 4.14.0 on WordPress. It has been rated as problematic. Impacted is an unknown function. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-28130. The attack is possible to be carried out remotely. No exploit exists.