A vulnerability labeled as problematic has been found in deepakkite Secure Client Portal and Private File Sharing Plugin up to 2.1.6 on WordPress. Affected by this issue is some unknown functionality. The manipulation of the argument fldr_ttl results in cross site scripting. This vulnerability is reported as CVE-2026-10093 . The attack can be launched remotely. No exploit exists.