A vulnerability classified as problematic has been found in Morkva UA Shipping Plugin up to 1.7.9 on WordPress. This affects an unknown function. Performing a manipulation of the argument kg results in cross site scripting.
This vulnerability was named CVE-2026-2292. The attack may be initiated remotely. There is no available exploit.