Skip to content
OpenAdvisories

Vendor

yalla ya!

2 known vulnerabilities.

Products

Simple Payment 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-96332

    WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4.

    yalla ya! Simple Payment
  • High 7.5
    CVE-2026-81767

    WordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.

    yalla ya! Simple Payment