TI-2025-03645 CVE-2025-4105 · GHSA-994p-m2fc-8rmp
Splitit <= 4.2.8 - Missing Authorization to Multiple Administrative Actions
Priority LOW 24
The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexfields-payment-gateway.php' file in all versions up to, and in…