Back to the CVE list

CVE-2026-17605

Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.56 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field

CVSS score

6.6

EPSS probability

%1.2

Risk score

0.1

Published

2 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

8.1

CVE-2026-19991UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion

Vendorstiofansisland ProductUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

Patch status unknownEPSS %01 mo ago

7.2

CVE-2026-111110Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' Parameter

Vendorstiofansisland ProductPayment forms, Buy now buttons, and Invoicing System | GetPaid

Patch status unknownEPSS %02 d ago

6.4

CVE-2026-18501UsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable Substitution

Vendorstiofansisland ProductUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

Patch status unknownEPSS %02 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-17605"