TI-2025-35891 CVE-2025-58048 · GHSA-5pm9-r2m8-rcmj
Paymenter Vulnerable to Remote Code Execution via Public File Uploads
Priority MEDIUM 43
Paymenter is a free and open-source webshop solution for hostings.
Paymenter
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Paymenter records in CISA KEVNo Paymenter vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-34786 CVE-2026-47198 · GHSA-5q4q-834j-g8g4
Paymenter: URL parameter injection bypasses paid plan limits at checkout
Priority LOW 37
Paymenter is a free and open-source webshop solution for management of hosting services.
TI-2026-32495 CVE-2026-44583 · GHSA-7wwh-xcc3-9fcg
Paymenter: Blind Unauthenticated SSRF on the Paypal gateway module
Priority LOW 30
Paymenter is a free and open-source webshop solution for management of hosting services.
TI-2026-50118 CVE-2026-71537 · GHSA-5gmm-hjfj-8ff7
Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)
Priority LOW 29
Paymenter is a free and open-source webshop solution for management of hosting services.
TI-2026-32497 CVE-2026-44585 · GHSA-x93q-x9pc-w5hw
Paymenter: Broken object level authorization via service reference manipulation on ticket creation
Priority LOW 24
Paymenter is a free and open-source webshop solution for management of hosting services.
TI-2026-39897 CVE-2026-55219 · GHSA-pgcq-8grm-5rx9
Paymenter: Race condition in payWithCredit() enables credit double-spend
Priority LOW 23
Paymenter is a free and open-source webshop solution for management of hosting services.
TI-2026-32496 CVE-2026-44584 · GHSA-rv89-wch8-c574
Paymenter doesn't reset email verification status after email change
Priority LOW 19
Paymenter is a free and open-source webshop solution for management of hosting services.