Knit Pay

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Knit Pay records in CISA KEV

No Knit Pay vulnerabilities are listed in CISA KEV.

Records

9 records

TI-2026-60477 CVE-2026-89426 · GHSA-mhvq-rh33-27cf

Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field

MEDIUM 40

The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00462 Published 2026-09-25 No fix listed CWE-269

TI-2026-80066 CVE-2026-114191 · GHSA-j9wp-962q-w884

WordPress UPI QR Code Payment Gateway for WooCommerce Broken Access Control

LOW 39

Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects U…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00336 Published 2026-10-24 No fix listed CWE-862

TI-2026-36296 CVE-2026-49070 · GHSA-f972-34qc-543f

WordPress Knit Pay plugin <= 9.4.0.0 - Broken Access Control vulnerability

LOW 38

Unauthenticated Broken Access Control in Knit Pay <= 9.4.0.0 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00238 Published 2026-06-15 No fix listed CWE-862

TI-2026-41541 CVE-2026-57717 · GHSA-93r7-2pv2-57hc

WordPress Knit Pay plugin <= 9.6.0.0 - Broken Access Control vulnerability

LOW 35

Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2026-07-23 No fix listed CWE-862

TI-2026-41361 CVE-2026-57424 · GHSA-wj76-7j4m-cj84

WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.4 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay Payment Links for…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2026-07-13 No fix listed CWE-862

TI-2025-41578 CVE-2025-67969 · GHSA-58qh-jxh9-rvp5

WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UP…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-862

TI-2026-79587 CVE-2026-112821 · GHSA-m5hv-6x82-cw8g

Missing authorization in WordPress Knit Pay plugin

LOW 34

Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knit Pay: from n/a through 9.6.3.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00207 Published 2026-10-23 No fix listed CWE-862

TI-2026-40417 CVE-2026-56023 · GHSA-qc9g-q3w6-g945

WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.2 - Broken Access Control vulnerability

LOW 24

Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-06-25 No fix listed CWE-862

TI-2026-64027 CVE-2026-97299 · GHSA-cgmr-246x-46p2

WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce <= 2.1.5 versions.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00095 Published 2026-09-30 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	6
Low	0
No CVSS	0