Description
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Razorpay | Razorpay Payment Button | ≤ 2.4.9 | — |
High · 7.1
CVE-2026-94179
EUVD-2026-85476GHSA-67p8-jpwc-54vj
WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack