Hi Jroy,
I highly recommend upgrading to the latest version 2.23.4 because all previous versions are vulnerable. Make sure you re-save plugin settings, just in case.
Please note, that Magnific Popup has been removed since version 2.23.0 and the original plugin version does not inquire about it. If you modified the plugin or made some customizations, you would need to update it to match the new HTML structure (eg. you targeting class ‘ytc-mfp-content’ from custom file wp-content/themes/phap/js/phap-script.js but in the new version that class does not exist anymore).
I would also appreciate if you provide settings of plugin and shortcode, so I try to replicate issue on my development stack.
Thank you for your assistance,
Aleksandar