Skip to content
OpenAdvisories

Vendor

Knit Pay

9 known vulnerabilities.

Products

UPI QR Code Payment Gateway for WooCommerce 3 Knit Pay 3 Razorpay Payment Links for WooCommerce 2 Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-114191

    WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooComme…

    Knit Pay UPI QR Code Payment Gateway for WooCommerce Web / CMS
  • High 8.8
    CVE-2026-89426

    Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field

    The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the `maybe_update_user_role()` function reading the target role directly fro…

    Knit Pay Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more Web / CMS
  • High 7.5
    CVE-2026-49070

    WordPress Knit Pay plugin <= 9.4.0.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Knit Pay <= 9.4.0.0 versions.

    Knit Pay Knit Pay