73 matches found
CVE-2026-96332
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4...
CVE-2026-96332 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4...
EUVD-2026-95624
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4...
CVE-2026-96332
The yalla ya! Simple Payment (simple-payment) WordPress plugin, versions n/a through 2.5.4 , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The vulnerability is caused by the improper neutralization of input during web page generation. This allows an attacker to execute malicious s...
PT-2026-108853
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4...
WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Simple Payment versions = 2.5.4...
CVE-2026-62111
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62111
CVE-2026-62111 affects the WordPress Simple Payment plugin in versions 2.5.4 and below . The vulnerability is a Contributor-level Cross-Site Scripting (XSS) flaw, discovered by V1T via Patchstack. It carries a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring low privileges and user ...
EUVD-2026-76209
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Simple Payment versions = 2.5.4...
CVE-2026-62111: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
PT-2026-90026
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-81292
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
CVE-2026-81292 WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
CVE-2026-81292
WordPress Simple Payment plugin versions ≤ 2.5.1 are affected by an unauthenticated Cross Site Scripting (XSS) vulnerability, as reported by Patchstack. The flaw requires user interaction but no prior authentication, and operates over the network with low complexity. The CVSS 3.1 base score is 7....
EUVD-2026-70594
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...