Medium · 5.9 CVE-2025-57891 EUVD-2025-28650GHSA-rx74-v5v8-g93c

WordPress Recurring PayPal Donations Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Published Aug 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wpecommerce Product: Recurring PayPal Donations

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpecommerce Recurring PayPal Donations recurring-donation allows Stored XSS.This issue affects Recurring PayPal Donations: from n/a through <= 1.8.

Affected products

Vendor	Product	Affected	Fixed
wpecommerce	Recurring PayPal Donations	≤ 1.8	—

References

https://patchstack.com/database/Wordpress/Plugin/recurring-donation/vulnerability/wordpress-recurring-paypal-donations-plugin-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry