Coachific Shortcode vulnerabilities

• coachific shortcode Coachific Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'userhash' Shortcode Attribute CVE-2026-4005 6.4 MediumApril 15, 2026