All packages
Simple Payment vulnerabilities
3 known CVE vulnerabilities in Simple Payment, translated and rated.
- CVE-2026-62111Medium
The Simple Payment plugin in versions up to and including 2.5.4 contains a Cross Site Scripting (XSS) vulnerability. A user with the Contributor role can inject malicious script code.
- CVE-2026-81292High
Unauthenticated Cross Site Scripting (XSS) in Simple Payment versions up to 2.5.1.
- CVE-2026-81767High
Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.