Vulnerabilities

TI-2026-13606 CVE-2026-16272 · GHSA-g622-qgc4-8v95

Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module

MEDIUM 47

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00211 Published 2026-09-09 Fixed in v9.0.3 CWE-348

TI-2026-13421 CVE-2026-16037 · GHSA-v26j-p538-j93h

LOW 39

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-09-08 Fixed in v9.0.3 CWE-208

TI-2026-13413 CVE-2026-16025 · GHSA-x832-hch7-hxvh

LOW 39

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0046 Published 2026-09-08 Fixed in v9.0.3 CWE-1284