CVE-2026-65517: WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.

Affected Software

1 affected component

WordPress Easy PayPal Buy Now Button Plugin<=2.0.4

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Easy PayPal Buy Now Button plugin to a version that resolves this vulnerability.
Fixed in 2.0.5

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-65517 has a high severity rating of 7.1 due to its potential impact on site security.

To fix CVE-2026-65517, update the Easy PayPal Buy Now Button plugin to version 2.0.5 or later.

CVE-2026-65517 is classified as a Cross Site Scripting (XSS) vulnerability affecting the Easy PayPal Buy Now Button plugin.

CVE-2026-65517 affects versions of the Easy PayPal Buy Now Button plugin up to and including 2.0.4.

CVE-2026-65517 is an unauthenticated Cross Site Scripting (XSS) vulnerability, meaning it can be exploited without user authentication.