A vulnerability marked as problematic has been reported in gn_themes WP Shortcodes Plugin up to 7.4.8 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. This manipulation of the argument su_slide_link causes cross site scripting.

This vulnerability appears as CVE-2026-0738. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.