Jashjacob Credits Shortcode vulnerabilities

• jashjacob credits shortcode Credits Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute CVE-2026-6256 6.4 MediumMay 12, 2026