Skip to content
OpenAdvisories
High · 7.5 CVE-2026-16025 EUVD-2026-72852GHSA-x832-hch7-hxvh

Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module

Published Sep 8, 2026 · Updated Oct 1, 2026 · Assigned by TR-CERT

Vendor: PayTR Payment and Electronic Money Institution Product: PayTR Virtual Pos iFrame API WHMCS Module

Description

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Input Data Manipulation.

This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3.

Affected products

VendorProductAffectedFixed
PayTR Payment and Electronic Money Institution PayTR Virtual Pos iFrame API WHMCS Module v9.0.0 – < v9.0.3 v9.0.3

References