7.1
High
CVE-2026-61960 Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions
Description
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Full Stripe Free 8.5 | earliest → 8.5.0 | No fix stated |
Other CVEs of WP Full Stripe Free
The 4 CVEs of WP Full Stripe Free →
CVE-2026-62073
Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions
7.5
High
CVE-2026-42378
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions
6.5
Medium
CVE-2025-58789
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP…
7.6
High