← All advisories

Medium severity6.5NVD Advisory· Published Sep 11, 2026· Updated Sep 11, 2026

CVE-2026-62111

CVE-2026-62111

Description

Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Simple Paymentllm-fuzzy
Range: <=2.5.4
Package: https://wordpress.org/plugins/simple-payment

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/simple-payment/vulnerability/wordpress-simple-payment-plugin-2-5-4-cross-site-scripting-xss-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)
Wordfence Blog · Sep 17, 2026