A vulnerability categorized as problematic has been discovered in e-plugins Lawyer Directory Plugin up to 1.3.2 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to cross site scripting.

This vulnerability appears as CVE-2026-28127. The attack may be performed from remote. There is no available exploit.