A vulnerability, which was classified as problematic, has been found in Saad Iqbal myCred Plugin up to 2.9.7.6 on WordPress. Affected is an unknown function. This manipulation causes cross site scripting.
This vulnerability is registered as CVE-2026-27440. Remote exploitation of the attack is possible. No exploit is available.