yalla ya!

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

yalla ya! records in CISA KEV

No yalla ya! vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-56403 CVE-2026-81767 · GHSA-5pr3-2w47-fp7f

WordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability

LOW 39

Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-08-28 No fix listed CWE-862

TI-2026-69948 CVE-2026-96332 · GHSA-x7px-44w3-4gpf

Reflected cross-site scripting in WordPress Simple Payment plugin

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0