Description
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Razorpay | Razorpay Payment Button Elementor Plugin | ≤ 1.2.8 | — |
High · 7.1
CVE-2026-54866
EUVD-2026-112955GHSA-463m-m2xx-mfmr
WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack