A vulnerability marked as problematic has been reported in codesupplyco Powerkit Plugin up to 3.1.0 on WordPress. This issue affects some unknown processing of the component Shortcode Handler. The manipulation of the argument style leads to cross site scripting.

This vulnerability is referenced as CVE-2026-15644. Remote exploitation of the attack is possible. No exploit is available.