A vulnerability labeled as problematic has been found in Embed Google Photos Album Plugin up to 2.2.1 on WordPress. Impacted is an unknown function of the component Shortcode Handler. Such manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2026-14290. The attack can be executed remotely. There is not any exploit available.
