{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/upi-qr-code-payment-gateway-for-woocommerce-n/a-through-1.6.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:knit_pay:upi_qr_code_payment_gateway_for_woocommerce:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-114191"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["UPI QR Code Payment Gateway for WooCommerce (n/a through 1.6.3)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Knit Pay"],"content_html":"","date_modified":"2026-10-24T18:18:29Z","date_published":"2026-10-24T18:18:29Z","id":"https://feed.craftedsignal.io/briefs/2026-10-knit-pay-auth-bypass/","summary":"A missing authorization vulnerability exists in the Knit Pay UPI QR Code Payment Gateway for WooCommerce plugin, affecting versions from n/a through 1.6.3. The vulnerability allows for the exploitation of incorrectly configured access control security levels.","title":"Knit Pay UPI QR Code Payment Gateway: Missing Authorization Vulnerability (CVE-2026-114191)","url":"https://feed.craftedsignal.io/briefs/2026-10-knit-pay-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - UPI QR Code Payment Gateway for WooCommerce (N/a Through 1.6.3)","version":"https://jsonfeed.org/version/1.1"}