CVE-2026-89100 | Payment Plugins Plugin up to 4.0.17 on WordPress getErrorMessage response cross site scripting

October 10, 2026 Yanac

A vulnerability was found in Payment Plugins Plugin up to 4.0.17 on WordPress. It has been rated as problematic. Affected is the function getErrorMessage. The manipulation of the argument Response leads to cross site scripting.

This vulnerability is traded as CVE-2026-89100. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More