Ido Kobelkowsky vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ido Kobelkowsky products: 4 record(s), with severity, exploitation and fixes.

Simple Payment 4

Exploited only (KEV) →

CVE-2026-62111 Medium · 6.5 CWE-79 Sep 11, 2026

WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.

CVE-2026-81292 High · 7.1 CWE-79 Sep 3, 2026

WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.

CVE-2025-62076 High · 7.1 CWE-79 Nov 6, 2025

WordPress Simple Payment plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6.

CVE-2025-62075 High · 7.5 CWE-98 Nov 6, 2025

WordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6.