CVE-2026-73338

Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.

Credits

ParkHyunWoo | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/platnosci-online-blue-media/vulnerability/wordpress-autopay-plugin-5-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve