A vulnerability was found in Themeisle Menu Icons Plugin up to 0.13.20 on WordPress. It has been rated as problematic. This vulnerability affects the function _wp_attachment_image_alt. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-1755. The attack may be initiated remotely. There is no available exploit.