Vulnerabilities

TI-2026-50118 CVE-2026-71537 · GHSA-5gmm-hjfj-8ff7

Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)

LOW 29

Paymenter is a free and open-source webshop solution for management of hosting services.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00325 Published 2026-09-18 Fixed in 1.5.7 CWE-362

TI-2026-39897 CVE-2026-55219 · GHSA-pgcq-8grm-5rx9

LOW 23

Paymenter is a free and open-source webshop solution for management of hosting services.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00214 Published 2026-07-20 Fixed in 1.5.5 CWE-362

TI-2026-34786 CVE-2026-47198 · GHSA-5q4q-834j-g8g4

LOW 37

Paymenter is a free and open-source webshop solution for management of hosting services.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00402 Published 2026-07-20 Fixed in 1.5.1 CWE-20

TI-2026-32497 CVE-2026-44585 · GHSA-x93q-x9pc-w5hw

LOW 24

Paymenter is a free and open-source webshop solution for management of hosting services.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00285 Published 2026-07-20 Fixed in 1.5.0 CWE-639

TI-2026-32495 CVE-2026-44583 · GHSA-7wwh-xcc3-9fcg

LOW 30

Paymenter is a free and open-source webshop solution for management of hosting services.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00415 Published 2026-07-20 Fixed in 1.5.0 CWE-918

TI-2026-32496 CVE-2026-44584 · GHSA-rv89-wch8-c574

LOW 19

Paymenter is a free and open-source webshop solution for management of hosting services.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00163 Published 2026-07-20 Fixed in 1.5.0 CWE-345

TI-2025-35891 CVE-2025-58048 · GHSA-5pm9-r2m8-rcmj

MEDIUM 43

Paymenter is a free and open-source webshop solution for hostings.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00431 Published 2025-08-28 Fixed in 1.2.11 CWE-434