A vulnerability labeled as problematic has been found in Embed Google Photos Album Plugin up to 2.2.1 on WordPress. Impacted is an unknown function of the component Shortcode Handler . Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-14290 . The attack can be executed remotely. There is not any exploit available.