Skip to content
OpenAdvisories

Product · Ido Kobelkowsky

Simple Payment

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-81292

    WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.

    Ido Kobelkowsky Simple Payment
  • High 7.1
    CVE-2025-62076

    WordPress Simple Payment plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6.

    Ido Kobelkowsky Simple Payment
  • High 7.5
    CVE-2025-62075

    WordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6.

    Ido Kobelkowsky Simple Payment
  • High 7.1
    CVE-2024-54303

    WordPress Simple Payment plugin <= 2.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through <= 2.3.8.

    Ido Kobelkowsky Simple Payment