simple-payment vulnerabilities
CVEs whose affected-version data names the simple-payment package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-96332High· 7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4.
▾ Twilightyalla ya! · simple-paymentEPSS 0.14%via NVD
CVE-2026-62111Medium· 6.5WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.
▾ SunlitIdo Kobelkowsky · simple-paymentEPSS 0.22%via CVEORG