Description
Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| yalla ya! | Simple Payment | ≤ 2.5.2 | — |
High · 7.5
CVE-2026-81767
EUVD-2026-67734GHSA-5pr3-2w47-fp7f
WordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability
Published Aug 28, 2026 · Updated Aug 28, 2026 · Assigned by Patchstack