Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-67969 EUVD-2025-208042GHSA-58qh-jxh9-rvp5

WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability

Published Feb 20, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through <= 1.5.1.

Affected products

VendorProductAffectedFixed
knitpay UPI QR Code Payment Gateway for WooCommerce ≤ 1.5.1 —

References