A vulnerability was found in dartiss Draft List Plugin up to 2.6.3 on WordPress. It has been rated as problematic. This affects an unknown function of the component Shortcode/Widget. This manipulation causes cross site scripting.
This vulnerability is handled as CVE-2026-49466. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is advised.
