CVE-2026-65518

MediumCVSS 6.5

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Summary

The Accept Donations with PayPal & Stripe plugin versions up to 1.5.5 contain a Cross Site Scripting (XSS) vulnerability exploitable by contributors. A contributor can inject malicious JavaScript code.

Risk Assessment

The risk includes session theft, redirection to malicious sites, or theft of data from visitors of the affected page.

Recommendation

Update the Accept Donations with PayPal & Stripe plugin to the latest version and restrict contributor permissions.

Other vulnerabilities in Accept Donations with PayPal & Stripe

CVE-2025-68602Medium
The WordPress plugin 'Accept Donations with PayPal & Stripe' up to version 1.5.2 has an Open Redirect vulnerability that could be used for phishing.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS