Simple Payment vulnerabilities

4 known CVE vulnerabilities in Simple Payment, translated and rated.

CVE-2026-96332High
Reflected XSS vulnerability in the Simple Payment plugin. Affects versions from n/a through 2.5.4.
CVE-2026-62111Medium
The Simple Payment plugin in versions up to and including 2.5.4 contains a Cross Site Scripting (XSS) vulnerability. A user with the Contributor role can inject malicious script code.
CVE-2026-81292High
Unauthenticated Cross Site Scripting (XSS) in Simple Payment versions up to 2.5.1.
CVE-2026-81767High
Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS