A vulnerability identified as problematic has been detected in Video Onclick Plugin up to 0.4.7 on WordPress. The affected element is an unknown function of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-1608. The attack can be initiated remotely. There is not any exploit available.