Description
Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ido Kobelkowsky | Simple Payment | ≤ 2.5.1 | — |
High · 7.1
CVE-2026-81292
EUVD-2026-70594GHSA-q744-qpcr-gww9
WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
Published Sep 3, 2026 · Updated Sep 3, 2026 · Assigned by Patchstack