← All advisories

Medium severity6.5NVD Advisory· Published Jul 23, 2026· Updated Jul 23, 2026

CVE-2026-65518

CVE-2026-65518

Description

Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions.

Affected products

2

WordPress/Accept Donations with PayPal & Stripellm-fuzzy
Range: <=1.5.5
WordPress/Accept Donations With Paypal And Stripeinferred
Range: <=1.5.5
Package: https://wordpress.org/plugins/accept-donations-with-paypal-and-stripe

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/easy-paypal-donation/vulnerability/wordpress-accept-donations-with-paypal-stripe-plugin-1-5-5-cross-site-scripting-xss-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)
Wordfence Blog · Jul 30, 2026